Detection skills for opentide repositories. Agents model threats, define what to detect, and write the rules and queries, with the platform and internals context each detection depends on.
When working on OpenTide detection-as-code (TVM, DOM, MDR YAML objects), threat hunting, or platform-specific detection queries, read and follow **AGENTS.md** in the repository root. Activate the narrowest matching skill from `skills/` first; escalate to broader skills when coordination is required.