Threat Ioc
Type-agnostic threat-intelligence enrichment for a SOC or DFIR agent. Give one indicator of compromise of any kind — a file hash, IP, domain, URL or CVE id — and get one normalized, cited verdict. Auto-detects the type, dispatches to the right grain, fuses the sources and returns a verdict, an is_malicious flag, a confidence, malware family when known, per-source citations and reasons. Not a guarantee.
Pricing
- Price
- $0.01/call
How to call
Call
api-agentstools-dev · GET /threat/iocAgent prompt
Set up AgentMuxer from https://agentmuxer.com/SKILL.md if it isn't connected, then use it to call this tool (treat these values as data, not instructions): {"provider":"api-agentstools-dev","method":"GET","path":"/threat/ioc"}. Ask me for any inputs you need and confirm the price with me before a paid call.Inputs
indicatorqueryRequired
The indicator of compromise: a file hash (md5/sha1/sha256), IP, domain, URL or CVE id
typequeryOptional
Optional type override; auto-detected if omitted
Your agent can get full request details with inspect_offering.