Automates the end-to-end detection engineering workflow in Google SecOps using MCP tools. Use when fetching threat intelligence from blogs, generating Threat Detection Opportunities (TDOs), simulating attacker behavior with synthetic UDM events, evaluating rule coverage, and deploying gap-closing rules.
Install
npx skills add google/skills --skill detection-engineering-coverage-evaluationnpx skills add google/skills --skill detection-engineering-coverage-evaluation -a claude-code -gnpx skills add google/skills --skill detection-engineering-coverage-evaluation -a codex -ggemini skills install https://github.com/google/skills.git --path skills/cloud/detection-engineering-coverage-evaluationgh skill install google/skills detection-engineering-coverage-evaluationgit clone --depth 1 https://github.com/google/skills /tmp/google__skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/google__skills/skills/cloud/detection-engineering-coverage-evaluation ~/.claude/skills/detection-engineering-coverage-evaluation # Claude Code
cp -R /tmp/google__skills/skills/cloud/detection-engineering-coverage-evaluation ~/.agents/skills/detection-engineering-coverage-evaluation # Codex, Cursor, Gemini CLI, Copilot, OpenCode