{"slug":"aiskillstore-forensics-osquery","source_name":"aiskillstore/forensics-osquery","name":"Aiskillstore/Forensics Osquery","description":"SQL-powered forensic investigation and system interrogation using osquery to query operating systems as relational databases. Enables rapid evidence collection, threat hunting, and incident response across Linux, macOS, and Windows endpoints. Use when: (1) Investigating security incidents and collecting forensic artifacts, (2) Threat hunting across endpoints for suspicious activity, (3) Analyzing running processes, network connections, and persistence mechanisms, (4) Collecting system state duri","version":1,"lift":{"pass_rate_delta_pts":8.7,"pass_rate_pct":95.7,"total_cases":23,"passed_cases":22,"tokens_delta_pct":264.5,"turns_delta_pct":0,"verdict":"mixed","benchmark_model":"gemini-3.6-flash","grading_method":"judged","completed_at":"2026-08-22T05:43:23.405582+00:00"},"skill_score":0.9565,"benchmark_models":[{"model":"gemini-3.6-flash","headline":true,"delta_pts":8.7,"with_pass_pct":95.7,"without_pass_pct":87,"tokens_delta_pct":264.5,"turns_delta_pct":0,"total_cases":23,"cases_aggregated":23,"verdict":"mixed","never_hurt":false,"completed_at":"2026-08-22T05:43:23.405582+00:00","run_id":"28901824-fbe0-4b08-9301-1495a3ff960f","version_number":1,"is_latest_version":true,"gate":null}],"trust":{"skill_safety":"passed","safety_status":"clean","intent_verdict":"safe","content_status":"clean","indexable":true},"license":null,"install_count":0,"manifest_hash":"8d5b51356d91b92defc2fc57b429be964db4b538dfbee583a2a66a00a6694fc4","raw_url":"https://app.decimal.ai/s/aiskillstore-forensics-osquery/SKILL.md","scorecard_url":"https://app.decimal.ai/skills/aiskillstore-forensics-osquery"}