# STIX/TAXII Intelligence Skill

> STIX/TAXII threat intelligence format and sharing

- Skill: `aibot88/stix-taxii-intelligence-skill` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds@latest add aibot88/stix-taxii-intelligence-skill`
- Raw SKILL.md: https://api.skillmd.com/api/skills/aibot88/stix-taxii-intelligence-skill/raw
- Safety review: pending (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: aibot88 (https://skillmd.com/u/aibot88)
- Updated: 2026-09-09
- Page: https://skillmd.com/skills/aibot88/stix-taxii-intelligence-skill

---


# STIX/TAXII Intelligence Skill

## Overview

This skill provides STIX/TAXII threat intelligence format creation, querying, and sharing capabilities.

## Capabilities

- Create STIX 2.1 bundles
- Query TAXII servers
- Generate threat reports
- Create indicator relationships
- Map to MITRE ATT&CK
- Support OpenIOC format
- Validate STIX syntax
- Share intelligence feeds

## Target Processes

- threat-intelligence-research.js
- malware-analysis.js
- security-advisory-writing.js

## Dependencies

- stix2 library (Python)
- taxii2-client
- Python 3.x
- TAXII server access (optional)

## Usage Context

This skill is essential for:
- Threat intelligence sharing
- IOC standardization
- Intelligence feed management
- Threat report generation
- Intelligence correlation

## Integration Notes

- Supports STIX 2.0 and 2.1
- Can publish to TAXII servers
- Integrates with MISP
- Supports multiple IOC formats
- Can generate human-readable reports