Expert guidance for security alert triage in Google SecOps. Use when investigating and triaging security alerts, determining false positives vs. true positives, assessing entity risk, adjusting alert severity or priority, and closing or escalating alerts and cases.
Install
npx skills add google/skills --skill secops-triagenpx skills add google/skills --skill secops-triage -a claude-code -gnpx skills add google/skills --skill secops-triage -a codex -ggemini skills install https://github.com/google/skills.git --path skills/cloud/secops-triagegh skill install google/skills secops-triagegit clone --depth 1 https://github.com/google/skills /tmp/google__skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/google__skills/skills/cloud/secops-triage ~/.claude/skills/secops-triage # Claude Code
cp -R /tmp/google__skills/skills/cloud/secops-triage ~/.agents/skills/secops-triage # Codex, Cursor, Gemini CLI, Copilot, OpenCode