by ArchAgentsThreat Intelligence Agent Sample
v0.3.7A security intelligence analyst that produces daily threat briefs from monitored feeds.
What’s included
- Threat Intelligence Agent SampleAgentTemplate
Produces a daily security brief focused on the team's actual stack. It scans advisories and security news, identifies direct exposures, files issues for actionable risks, and stores brief history for trend tracking.
- Search HN SecurityAgentToolTemplate
Search Hacker News for recent security stories via the HN Algolia API. Returns metadata only (title, URL, points, comments, dates) — does NOT scrape content.
- List Recent AdvisoriesAgentToolTemplate
List recently published GitHub Security Advisories filtered by ecosystem and severity.
- Get Repo FileAgentToolTemplate
Read a file from a GitHub repository (e.g. mix.exs, package.json, requirements.txt) to check if a vulnerable package is in use.
- Create GitHub IssueAgentToolTemplate
File a GitHub issue (used for both exposure issues and the daily brief itself)
- Daily Threat BriefAgentRoutineTemplate
Daily threat intelligence brief at 07:00 UTC
Threat Intelligence Agent Sample
A security intelligence analyst that produces daily threat briefs from monitored feeds.
Architecture
What it ships
- Deployable agent template under
agents/threat-intel-agent-sample.yaml - 4 standalone custom tool template(s) under
tools/ - 1 standalone routine template(s) under
routines/ - Setup actions embedded directly on the agent and atomic templates
Validate/import
uv run scripts/sample_tool.py pack solutions/threat-intel-agent-sample