Why shouldn't I call MCP tools directly?

This skill uses a specialized executor sub-agent to handle large data results and ensures parameter accuracy by loading specific function documentation before execution.

Is a LimaCharlie account required to use this skill?

Yes, you must have an active LimaCharlie account and run the /init-lc command to initialize your environment context and authentication.

What kind of live response actions can I perform?

You can list processes, browse file systems, run YARA scans, isolate sensors from the network, and manage persistence mechanisms like autoruns in real-time.

Can I run LCQL queries for data older than 30 days?

Yes, but the skill will prompt for cost confirmation and provide an estimate before executing queries on historical data outside the free 30-day window.

LimaCharlie Security Ops

Name: LimaCharlie Security Ops
Author: refractionPOINT

$refractionPOINT$ byrefractionPOINT

•

보안 및 테스팅

Automates LimaCharlie security operations including sensor management, threat hunting, and detection engineering via a specialized sub-agent.

This skill serves as the central hub for all LimaCharlie platform interactions within Claude Code, providing access to over 170 specialized functions. It simplifies complex security workflows such as listing sensors, executing LCQL queries for threat hunting, managing Detection & Response (D&R) rules, and performing live response actions like network isolation or YARA scanning. By leveraging a dedicated executor sub-agent and enforced documentation loading, it ensures accurate API calls, proper parameter usage, and efficient multi-agent parallel execution for large-scale security telemetry analysis.

주요 기능

01Dedicated executor sub-agent for handling large API responses and parallel processing

02Real-time sensor operations including live process monitoring and network isolation

03Access to 170+ LimaCharlie API functions for comprehensive security management

04Streamlined Detection & Response (D&R) rule creation, validation, and testing

05Automated LCQL query generation and cost-aware execution for threat hunting

063 GitHub stars

사용 사례

01Searching for Indicators of Compromise (IOCs) across an entire organization using LCQL

02Performing emergency incident response by isolating compromised sensors and running YARA scans

03Managing large-scale security configurations, including detection rules and data outputs

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add refractionpoint/lc-ai limacharlie-call

For use in Claude.ai and ChatGPT

주요 기능

01Dedicated executor sub-agent for handling large API responses and parallel processing

02Real-time sensor operations including live process monitoring and network isolation

03Access to 170+ LimaCharlie API functions for comprehensive security management

04Streamlined Detection & Response (D&R) rule creation, validation, and testing

05Automated LCQL query generation and cost-aware execution for threat hunting

063 GitHub stars

사용 사례

01Searching for Indicators of Compromise (IOCs) across an entire organization using LCQL

02Performing emergency incident response by isolating compromised sensors and running YARA scans

03Managing large-scale security configurations, including detection rules and data outputs