{"slug":"elementalsouls-mid-engagement-ir-detection","source_name":"elementalsouls/mid-engagement-ir-detection","name":"Elementalsouls/Mid Engagement Ir Detection","description":"Methodology for detecting client SOC patches, attacker activity, and security-state changes that occur DURING a red-team engagement — and converting those observations into deliverable findings. Built from authorized red-team work where the client patched a confirmed SQLi within 30 minutes of detection AND an external attacker locked multiple new accounts during a single test session. Use when (a) running ANY active engagement against a monitored target, (b) a previously-confirmed finding stops ","version":1,"lift":{"pass_rate_delta_pts":54.55,"pass_rate_pct":86.4,"total_cases":22,"passed_cases":19,"tokens_delta_pct":173.4,"turns_delta_pct":0,"verdict":"mixed","benchmark_model":"gemini-3.6-flash","grading_method":"judged","completed_at":"2026-08-09T14:03:54.122055+00:00"},"skill_score":0.8636,"benchmark_models":[{"model":"gemini-3.6-flash","headline":true,"delta_pts":54.55,"with_pass_pct":86.4,"without_pass_pct":31.8,"tokens_delta_pct":173.4,"turns_delta_pct":0,"total_cases":22,"cases_aggregated":22,"verdict":"mixed","never_hurt":false,"completed_at":"2026-08-09T14:03:54.122055+00:00","run_id":"0dbc3bc7-babc-4df8-9a3d-2e14d2d900a1","version_number":1,"is_latest_version":true,"gate":null}],"trust":{"skill_safety":"passed","safety_status":"clean","intent_verdict":"safe","content_status":"clean","indexable":true},"license":"NOASSERTION","install_count":0,"manifest_hash":"615b10f67cd7ec52c59fc986196791c767a7cb9a465f58770346281fd1989f66","raw_url":"https://app.decimal.ai/s/elementalsouls-mid-engagement-ir-detection/SKILL.md","scorecard_url":"https://app.decimal.ai/skills/elementalsouls-mid-engagement-ir-detection"}