How do I install the Check Duplicates skill?

Run npx skillmds@latest add dandye/check-duplicates in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

What does the Check Duplicates skill do?

Check for duplicate or similar cases. Use before deep analysis to avoid investigating the same incident twice. Takes a CASE_ID and returns list of similar cases. It is listed under Coding & Dev Tools on SkillMD.

Is Check Duplicates safe to use?

This skill has not completed SkillMD's automated safety review yet. Capability flags: docs only. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Check Duplicates?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Check Duplicates free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Check Duplicates?

dandye (@dandye) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Check Duplicates by dandye — Agent Skill

Name: Check Duplicates
Rating: 4.666666666666667 (3 reviews)
Author: dandye

File contents

Check Duplicates Skill

Identify potentially duplicate or similar existing cases before starting deep analysis.

Inputs

CASE_ID - The ID of the current case to check
ALERT_GROUP_IDENTIFIERS - Alert group identifiers for the case
(Optional) DAYS_BACK - How many days to search back (default: 7)
(Optional) INCLUDE_OPEN - Include open cases (default: true)
(Optional) INCLUDE_CLOSED - Include closed cases (default: false)

Workflow

Step 1: Execute Similarity Check

secops-soar.siemplify_get_similar_cases(
    case_id=CASE_ID,
    alert_group_identifiers=ALERT_GROUP_IDENTIFIERS,
    days_back=DAYS_BACK,
    include_open_cases=INCLUDE_OPEN,
    include_closed_cases=INCLUDE_CLOSED
)

Step 2: Process Results

Extract the list of similar case IDs from the response.

Outputs

Output	Description
`SIMILAR_CASE_IDS`	List of case IDs identified as potentially similar/duplicate
`SIMILARITY_CHECK_STATUS`	Success/failure status of the check

Usage Pattern

1. Check duplicates BEFORE enrichment
2. If duplicates found:
   - Review similar case(s)
   - If confirmed duplicate: close as duplicate
   - If related but distinct: note correlation, continue
3. If no duplicates: proceed with analysis

When Duplicates Are Found

If SIMILAR_CASE_IDS is not empty:

Document: "Closing as duplicate of [Similar Case ID]"
Close with:
- Reason: NOT_MALICIOUS
- Root cause: Similar case is already under investigation

Frequently asked questions

Check Duplicates