agentsclimarketplace
Sign in

Yara rules

Skill a5c-ai/babysitter/library/specializations/security-research/skills/yara-rules

YARA rule creation, testing, and deploymentFrom its SKILL.md

Install
npx -y skills add a5c-ai/babysitter --skill yara-rules

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

SKILL.md

1.6 KB, 240 tokens by cl100k_base, as published. Nobody here has run it

YARA Rules Skill

Overview

This skill provides capabilities for YARA rule creation, testing, and deployment for malware detection and threat hunting.

Capabilities

  • Generate YARA rules from samples
  • Validate YARA rule syntax
  • Test rules against sample sets
  • Optimize rules for performance
  • Create rule metadata and documentation
  • Support YARA modules (PE, ELF, etc.)
  • Integrate with VirusTotal YARA
  • Generate Sigma rules for correlation

Target Processes

  • malware-analysis.js
  • threat-intelligence-research.js
  • security-tool-development.js

Dependencies

  • YARA CLI
  • yara-python library
  • VirusTotal API (optional)
  • Sample malware corpus (for testing)

Usage Context

This skill is essential for:

  • Malware detection rule development
  • Threat hunting operations
  • IOC-based detection
  • Malware family classification
  • Automated sample triage

Integration Notes

  • Rules can be tested against known good/bad samples
  • Performance metrics help optimize detection speed
  • Supports rule versioning and documentation
  • Can export to multiple detection platforms
  • Integrates with YARA-L for Chronicle

What ships with it: 1 file

566 B alongside SKILL.md

Keep looking

Skills are one crate of 326,059. Ordering is by how many stacks a row turns up in, so the top of any crate is what has actually been picked rather than what has the most stars.