Expert guidance for proactive threat hunting. Use this when the user asks to "hunt" for threads, IOCs, or specific TTPs.
Install
npx skills add google/mcp-security --skill secops-huntnpx skills add google/mcp-security --skill secops-hunt -a claude-code -gnpx skills add google/mcp-security --skill secops-hunt -a codex -ggemini skills install https://github.com/google/mcp-security.git --path extensions/google-secops/skills/huntgh skill install google/mcp-security secops-huntgit clone --depth 1 https://github.com/google/mcp-security /tmp/google__mcp-security
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/google__mcp-security/extensions/google-secops/skills/hunt ~/.claude/skills/secops-hunt # Claude Code
cp -R /tmp/google__mcp-security/extensions/google-secops/skills/hunt ~/.agents/skills/secops-hunt # Codex, Cursor, Gemini CLI, Copilot, OpenCode