Automates phishing incident response by calling the Splunk SOAR (Phantom) REST API to create containers, attach artifacts (emails, URLs, attachments), and trigger response playbooks. Use when building or wiring up a Splunk SOAR phishing playbook, ingesting a suspected phishing report into SOAR, or automating containment and triage for phishing incidents.
Install
npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill implementing-soar-playbook-for-phishingnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill implementing-soar-playbook-for-phishing -a claude-code -gnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill implementing-soar-playbook-for-phishing -a codex -ggemini skills install https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git --path skills/implementing-soar-playbook-for-phishinggh skill install mukul975/Anthropic-Cybersecurity-Skills implementing-soar-playbook-for-phishinggit clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills /tmp/mukul975__Anthropic-Cybersecurity-Skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/implementing-soar-playbook-for-phishing ~/.claude/skills/implementing-soar-playbook-for-phishing # Claude Code
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/implementing-soar-playbook-for-phishing ~/.agents/skills/implementing-soar-playbook-for-phishing # Codex, Cursor, Gemini CLI, Copilot, OpenCode