Skip to main content

Agentic Skills

N
Written by Nataliia Pukaliak

Overview

Skills are sets of instructions that extend the capabilities of the Prime Architect agent for specific tasks. Instead of explaining a workflow in your prompt every time, you can use a skill that already includes the steps and requirements for it, and the agent follows them to complete the task. For example, skills can guide the agent to turn a description, log sample, or IOCs into a Sigma rule, turn a hypothesis into a hunting query for your environment, extract hashes, domains, IPs, and URLs from a report or raw text, and more.

Skills can be discovered, created, and managed in Agentic Skills, available in Agentic Threat Research. Available skills are organized in a library, which you can browse to find skills relevant to your workflow, or you can create your own personal skills.

Working with a skill typically follows this process:

  1. Discover a skill in the skill library or create your own personal skill.

  2. Install the skill so it becomes available for use in Prime Architect chat.

  3. Use the installed skill in chat to guide the agent on a relevant task.

Accessing Agentic Skills

Go to Prime Architect > Agentic Threat Research, and in the left panel, select Agentic Skills.

The Agentic Skills page consists of the following tabs:

  • My – Contains skills installed from the skills library and personal skills created by you

  • Bookmarks – Contains bookmarked skills

  • Browse – Contains all available library skills

My

The My tab contains your personal skills and the skills you've installed from the library, with the most recently installed skills displayed first.

Create a Skill

  1. Select Add Skill.

  2. Enter a skill name.

  3. Enter a description.

  4. Provide the instructions for agent to follow in the Skill field.

  5. In the Category dropdown, select a category.

  6. When ready, click Save Skill.

Once created, the skill appears in the My tab, under Created by you.

Note: A newly created personal skill isn't immediately available for use in Prime Architect chat, you need to install it first. Skills that aren't yet installed are marked with a corresponding label in the list.

Manage Skills

For skills installed from the library, select the three dots on a skill tile to:

  • Use in New Chat – Starts a new chat with the selected skill, so you can put it to work right away

  • Uninstall – Removes the skill from the chat skills list and My tab. It remains available in the Browse tab if you want to reinstall it later

For your personal skills, select the three dots on a skill tile to:

  • Install – Makes the skill available for use in Prime Architect chat

  • Uninstall – Removes the skill from the chat skills list but it remains in the My tab under Created by you

  • Use in New Chat – Installs the skill (if not already installed) and starts a new chat with it, so you can put it to work right away

  • Edit – Update the skill's name, description, instructions, or category

  • Delete – Remove the personal skill

Click a skill tile to view its details page:

  • For skills installed from the library, this opens the Skill Details page described in this section.

  • For personal skills, this opens the Personal Skill Details page, showing the skill's name, description, instructions, category, author, and creation date. From here, you can install, uninstall, edit, or download the skill.

    Downloading a personal skill generates a ZIP package containing its SKILL.md file, so you can store it or use it with a compatible external agent or platform.

Bookmarks

The Bookmarks tab contains all skills you've bookmarked for future reference, with the most recently bookmarked skills displayed first.

Bookmarking is meant for tracking skills you're interested in without committing to installing them yet. For example, while you're still evaluating whether a skill fits your workflow, or checking back on updates to a skill you're not ready to use.

Browse

The Browse tab is where you discover all available library skills. Skills in the library go through a review process by the SOC Prime team before being available for users. When a skill originates from a source other than SOC Prime, the original publisher's name is displayed on the skill.

  • Search – Use the search bar to find skills by name or description.

  • Browse by category – Skills are sorted according to the NIST Cybersecurity Framework:

    • Govern

    • Identify

    • Protect

    • Detect

    • Respond

    • Recover

    This helps you find skills relevant to a specific stage of your security workflow. The number on a category tile shows how many skills it contains. Click a tile to access its skills

  • For You – A selection of skills recommended for you

  • New – The most recently published skills, useful for keeping up with newly released capabilities

Skill Tiles

Each skill tile displays:

  • Skill name – A name of the skill

  • Short description – A summary of what the skill does

  • Author – Who created the skill

  • SOC Prime verification status – Indicates whether the skill has been reviewed and verified by the SOC Prime team

  • Number of installations – How many users have installed the skill

From a skill tile, you can:

  • Install the skill by clicking Install to My Skills.

    To uninstall, hover over the installed icon and select Uninstall.

  • Bookmark the skill by clicking Add to Bookmarks.

    To remove it, hover over the bookmark icon and select Remove from Bookmarks.

Skill Details

Click a skill tile to open its details page. The page consists of two tabs: Overview and Content.

Overview

Provides the information you need to evaluate a skill before installing it:

  • Short description – A brief summary of the skill's purpose

  • Flow diagram – A visual showing the expected input, process, and output flow

  • When to Use – Scenarios the skill fits, and cases where it doesn't. Click the plus icon to expand

  • Prerequisites – What needs to be in place or provided before running the skill. Click the plus icon to expand

  • How it Works – The steps the agent follows to produce the skill's output. Click the plus icon to expand

  • Example – A sample command or prompt showing the skill in action

On the right side of the page, you can also see:

  • Security Score – Reflects the outcome of the skill's security review

  • Number of installations – Total installs across all users

  • Release date – When the skill was published or last updated

  • Author – Who created or published the skill

  • SOC Prime verification status – Indicates whether the skill has been reviewed and verified by the SOC Prime team

  • Category – The NIST Cybersecurity Framework category the skill belongs to (Govern, Identify, Protect, Detect, Respond, Recover)

  • Compatibility – Information about the environments, agents, and tools the skill is compatible with (e.g., Prime Architect, Claude, Codex). You can install only the skills compatible with Prime Architect

  • Security Checks – The results of automated security checks run against the skill

Content

This tab shows the actual skill instructions in read-only mode, so you can review exactly what the skill will instruct the agent to do before installing, bookmarking, or downloading it.

Actions

Bookmark A Skill

To bookmark a skill for future reference:

  • Select Bookmark on the Skill Details page, or

  • Click Add to Bookmarks directly on the skill tile

Once bookmarked, the skill appears in the Bookmarks tab, and its tile shows a bookmark label highlighted in green wherever it appears across Agentic Skills.

To remove a skill from bookmarks, hover over the bookmark button on the Skill Details page or the bookmark icon on the skill tile, and select Remove from Bookmarks.

Install a Skill

To use a skill in chat for your workflows, you need to install it. For this:

  • Select Install on the Skill Details page, or

  • Click Install directly on the skill tile

Note: A library skill can only be installed if it's compatible with Prime Architect.

Once installed, the skill appears in the My tab, and its tile shows a tick icon indicating it's installed.

Installed skills automatically receive future published updates, so you always run the latest version without manual action. If an update makes a skill incompatible with Prime Architect, it is automatically removed from the My tab and is not available in the chat skills list anymore.

To uninstall a skill, select Uninstall on the Skill Details page, or hover over the installed icon on the skill tile and select Uninstall.

Download a Skill

You can download any library skill as a portable package. For example, to store it, or to use it with a compatible external agent or platform. Selecting Download on the Skill Details page generates a ZIP package containing the skill's SKILL.md file.

Use a Skill in Chat

Once a skill is installed and is compatible with Prime Architect, you can add it to a conversation so the agent follows its instructions when performing a relevant task.

There are three ways to add a skill to the chat input:

Option 1: Using the + icon

  1. Click the + icon in the chat input area and select Add Skills.

  2. Select a skill from the list.

  3. The skill appears in the input area, ready to be used with your next message.

Option 2: Using the / shortcut

  1. In the chat input field, type / to search by skill name or description. A list of your installed skills appears.

  2. Select a skill from the list.

  3. The skill appears in the input area, ready to be used with your next message.

Option 3: Using the Agentic Skills button

  1. Select Agentic Skills above the chat input area and select a skill from the list.

  2. The skill appears in the input area, ready to be used with your next message.

Note: You can select only one skill per message.

A skill can be combined with other inputs in the same message, such as your own custom prompt text, a file, a detection. This lets you provide the agent with additional context or specifics alongside the skill's instructions before sending your message.

Related Articles
Did this answer your question?