security-detections-mcp Skill by ara.so — Security Skills collection An MCP (Model Context Protocol) server providing LLM access to 8,200+ security detection rules across Sigma, Splunk ESCU, Elastic, KQL, Sublime, and CrowdStrike CQL formats, with MITRE ATT&CK mapping, coverage analysis, and autonomous detection engineering. What It Does - Unified detection search across 6 major security platforms (Sigma, Splunk, Elastic, KQL, Sublime, CrowdStrike) - MITRE ATT&CK integration with 172 threat actors, 784 software, 4,362 actor-technique relationships - Coverage analysis identifying gaps in detec…