Build automated incident response playbooks in Cortex XSOAR (Demisto) using its YAML playbook structure, integration commands, and task types to orchestrate phishing, malware, account-compromise, and DDoS response workflows across SOC tools.
Install
npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill implementing-soar-playbook-with-palo-alto-xsoarnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill implementing-soar-playbook-with-palo-alto-xsoar -a claude-code -gnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill implementing-soar-playbook-with-palo-alto-xsoar -a codex -ggemini skills install https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git --path skills/implementing-soar-playbook-with-palo-alto-xsoargh skill install mukul975/Anthropic-Cybersecurity-Skills implementing-soar-playbook-with-palo-alto-xsoargit clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills /tmp/mukul975__Anthropic-Cybersecurity-Skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/implementing-soar-playbook-with-palo-alto-xsoar ~/.claude/skills/implementing-soar-playbook-with-palo-alto-xsoar # Claude Code
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/implementing-soar-playbook-with-palo-alto-xsoar ~/.agents/skills/implementing-soar-playbook-with-palo-alto-xsoar # Codex, Cursor, Gemini CLI, Copilot, OpenCode