Not in the top 1,000 by GitHub stars
gensecaihq/Wazuh-Autopilot
Agentic SOC for Wazuh built on Strands Agents: a 13-agent swarm with 37 Wazuh-verified skills triages, investigates and plans response through the Wazuh MCP Server. Policy-gated autonomy, approvals, RBAC, audit, tracing and evals in one Docker stack. Bedrock, Anthropic, NVIDIA NIM, vLLM, LiteLLM or air-gapped Ollama.
History
Review weekly changes to SKILL.md before updating. Dates mark the weeks in which we observed each version; checks apply to the recorded commits.
View weekly changes
backend/app/skills/action-verification/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Not checked yet
07da85f90cf7 → 07da85f90cf7
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → 07da85f90cf7
No earlier version was observed for comparison.
backend/app/skills/alert-correlation/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Not checked yet
07da85f90cf7 → 07da85f90cf7
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → 07da85f90cf7
No earlier version was observed for comparison.
backend/app/skills/alert-triage/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Not checked yet
07da85f90cf7 → 07da85f90cf7
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → 07da85f90cf7
No earlier version was observed for comparison.
backend/app/skills/compliance-mapping/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Not checked yet
07da85f90cf7 → 07da85f90cf7
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → 07da85f90cf7
No earlier version was observed for comparison.
backend/app/skills/containment-playbooks/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Not checked yet
07da85f90cf7 → 07da85f90cf7
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → 07da85f90cf7
No earlier version was observed for comparison.
backend/app/skills/detection-engineering/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Not checked yet
07da85f90cf7 → 07da85f90cf7
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → 07da85f90cf7
No earlier version was observed for comparison.
backend/app/skills/entity-extraction/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Not checked yet
07da85f90cf7 → 07da85f90cf7
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → 07da85f90cf7
No earlier version was observed for comparison.
backend/app/skills/executive-reporting/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Not checked yet
07da85f90cf7 → 07da85f90cf7
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → 07da85f90cf7
No earlier version was observed for comparison.
backend/app/skills/host-forensics/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Not checked yet
07da85f90cf7 → 07da85f90cf7
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → 07da85f90cf7
No earlier version was observed for comparison.
backend/app/skills/identity-compromise/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Not checked yet
07da85f90cf7 → 07da85f90cf7
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → 07da85f90cf7
No earlier version was observed for comparison.
backend/app/skills/incident-timeline/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Not checked yet
07da85f90cf7 → 07da85f90cf7
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → 07da85f90cf7
No earlier version was observed for comparison.
backend/app/skills/ioc-enrichment/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Not checked yet
07da85f90cf7 → 07da85f90cf7
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → 07da85f90cf7
No earlier version was observed for comparison.
backend/app/skills/ir-playbook-bruteforce/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Not checked yet
07da85f90cf7 → 07da85f90cf7
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → 07da85f90cf7
No earlier version was observed for comparison.
backend/app/skills/ir-playbook-data-exfiltration/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Not checked yet
07da85f90cf7 → 07da85f90cf7
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → 07da85f90cf7
No earlier version was observed for comparison.
backend/app/skills/ir-playbook-lateral-movement/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Not checked yet
07da85f90cf7 → 07da85f90cf7
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → 07da85f90cf7
No earlier version was observed for comparison.
backend/app/skills/ir-playbook-privilege-escalation/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Not checked yet
07da85f90cf7 → 07da85f90cf7
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → 07da85f90cf7
No earlier version was observed for comparison.
backend/app/skills/ir-playbook-ransomware/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Not checked yet
07da85f90cf7 → 07da85f90cf7
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → 07da85f90cf7
No earlier version was observed for comparison.
backend/app/skills/ir-playbook-suspicious-powershell/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Not checked yet
07da85f90cf7 → 07da85f90cf7
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → 07da85f90cf7
No earlier version was observed for comparison.
backend/app/skills/ir-playbook-vulnerability-spike/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Not checked yet
07da85f90cf7 → 07da85f90cf7
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → 07da85f90cf7
No earlier version was observed for comparison.
backend/app/skills/mitre-attack-mapping/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Not checked yet
07da85f90cf7 → 07da85f90cf7
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → 07da85f90cf7
No earlier version was observed for comparison.
backend/app/skills/prompt-injection-defense/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Not checked yet
07da85f90cf7 → 07da85f90cf7
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → 07da85f90cf7
No earlier version was observed for comparison.
backend/app/skills/response-planning/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Not checked yet
07da85f90cf7 → 07da85f90cf7
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → 07da85f90cf7
No earlier version was observed for comparison.
backend/app/skills/severity-scoring/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Not checked yet
07da85f90cf7 → 07da85f90cf7
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → 07da85f90cf7
No earlier version was observed for comparison.
backend/app/skills/soc-metrics/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Not checked yet
07da85f90cf7 → 07da85f90cf7
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → 07da85f90cf7
No earlier version was observed for comparison.
backend/app/skills/swarm-coordination/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Not checked yet
07da85f90cf7 → 07da85f90cf7
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → 07da85f90cf7
No earlier version was observed for comparison.
backend/app/skills/threat-actor-attribution/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Not checked yet
07da85f90cf7 → 07da85f90cf7
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → 07da85f90cf7
No earlier version was observed for comparison.
backend/app/skills/threat-hunting/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Not checked yet
07da85f90cf7 → 07da85f90cf7
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → 07da85f90cf7
No earlier version was observed for comparison.
backend/app/skills/vulnerability-prioritization/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Not checked yet
07da85f90cf7 → 07da85f90cf7
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → 07da85f90cf7
No earlier version was observed for comparison.
backend/app/skills/wazuh-active-response/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Not checked yet
07da85f90cf7 → 07da85f90cf7
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → 07da85f90cf7
No earlier version was observed for comparison.
backend/app/skills/wazuh-cloud-container/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Not checked yet
07da85f90cf7 → 07da85f90cf7
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → 07da85f90cf7
No earlier version was observed for comparison.
backend/app/skills/wazuh-fim-investigation/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Not checked yet
07da85f90cf7 → 07da85f90cf7
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → 07da85f90cf7
No earlier version was observed for comparison.
backend/app/skills/wazuh-malware-detection/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Not checked yet
07da85f90cf7 → 07da85f90cf7
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → 07da85f90cf7
No earlier version was observed for comparison.
backend/app/skills/wazuh-mcp-querying/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Not checked yet
07da85f90cf7 → 07da85f90cf7
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → 07da85f90cf7
No earlier version was observed for comparison.
backend/app/skills/wazuh-platform-health/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Not checked yet
07da85f90cf7 → 07da85f90cf7
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → 07da85f90cf7
No earlier version was observed for comparison.
backend/app/skills/wazuh-rules-and-decoders/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Not checked yet
07da85f90cf7 → 07da85f90cf7
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → 07da85f90cf7
No earlier version was observed for comparison.
backend/app/skills/wazuh-sca-hardening/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Not checked yet
07da85f90cf7 → 07da85f90cf7
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → 07da85f90cf7
No earlier version was observed for comparison.
backend/app/skills/wazuh-windows-sysmon/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Not checked yet
07da85f90cf7 → 07da85f90cf7
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → 07da85f90cf7
No earlier version was observed for comparison.
Heat
4.0- Star growth, last 7 daysNot available
- Star growth, last 24 hoursNot available
- Rank movement, last 7 daysNot available
- Commits, last 30 daysNot available
- Accounts asking about it through MCP, last 7 daysNot available
- Hot votes this weekNot available
Heat never changes the order by stars, and sponsorship never touches it. How heat works
Stars over time
30-day change not yet available: not enough history.
How it works
Skills included
Repository facts
- License
- MIT
- Created
- Feb 13, 2026
- Last pushed
- Sep 24, 2026
- Forks
- 16
- Open issues
- 4
- Project activity
- Not available
Before you install
Not checked yetAutomated signals, not a guarantee
No scan has been recorded for this repository yet.
