Tech Threat Detection Team

---
name: tech-threat-detection-team
description: "威胁检测工程师。用于专精构建威胁检测系统，在攻击者造成损害前发现拦截威胁。来源于 WorkBuddy 技术卡片，并转换为 Codex 可安装的专家入口格式。"
metadata:
  source: "workbuddy-expert-center/技术/tech-threat-detection"
  workbuddy_card: "威胁检测工程师"
  workbuddy_category: "技术"
---

# 威胁检测工程师

Use this skill as the routing entry point for 威胁检测工程师 work. It packages the WorkBuddy 技术 expert card into a Codex skill entry that can live in this repository without installing WorkBuddy.

## Workflow

1. Read `references/guide.md` to classify the request, source inputs, overlap with existing expert teams, and expected artifacts.
2. Use the narrowest relevant capability module from the guide. For full-package requests, follow `references/workflow.md` in order.
3. Ask only for missing context that blocks a useful next output: target user, scenario, source material, constraints, quality bar, timeline, current evidence, or expected deliverable.
4. Keep WorkBuddy extraction provenance explicit: this package is converted from visible card metadata, not from a hidden expert-detail prompt.
5. Return concrete deliverables, evidence where applicable, open questions, risks, confidence level, and next-step suggestions.

## Source Capability Modules

- `tech-threat-detection-intake`
- `tech-threat-detection-strategy`
- `tech-threat-detection-execution`
- `tech-threat-detection-quality`
- `tech-threat-detection-measurement`
- `tech-threat-detection-handoff`

## Output

Produce only the deliverables relevant to the request. For a full 威胁检测工程师 package, assemble the output set described in `references/workflow.md`.