Skill v1.0.1
currentAutomated scan100/100+3 new
version: "1.0.1" name: mira-detection-distill description: Route Mira detection findings into a reusable knowledge pipeline. Use when Codex needs to turn a new detection clue, risk-environment observation, or research note into topic confirmation, case capture, topic maintenance, and article update suggestions inside the Mira repository.
Mira Detection Distill
Overview
Use this skill as the entry point for Mira detection knowledge work. Do not predefine topic trees. Start from the user's current clue, object, phenomenon, or draft note. Always confirm topic dynamically before creating or updating topic assets.
Core Contract
Treat the pipeline as four layers:
casefor one concrete detection record.topicfor one evolving research theme.patternfor reusable judgment distilled from multiple cases.articlefor English-first publication drafts and Chinese adaptations.
Do not merge these layers into one artifact. Do not write article prose into case files. Do not turn skill instructions into article text.
Workflow
1. Triage the request
Classify the current task as one of:
- new case capture.
- existing topic update.
- article update suggestion.
- mixed request spanning multiple layers.
2. Confirm topic dynamically
Never invent a permanent topic silently. Ask for topic confirmation using the minimum needed prompt. Base the suggestion on the current material only.
When the user has not named a topic, provide 1 to 3 candidate topic directions:
- the most likely topic suggestion.
- why it fits.
- how it differs from adjacent directions.
- whether creating a new topic is justified.
Wait for user confirmation before creating or updating knowledge/topics/<topic-slug>/.
3. Route to the correct execution skill
Use:
$mira-case-capturefor one concrete case.$mira-topic-maintainerafter topic confirmation.$mira-article-updaterwhen the user wants article updates, or when enough new material may justify article changes.
4. Produce explicit next actions
Always end with the smallest useful next step. Examples:
- confirm topic.
- capture case only.
- update topic and backlog.
- suggest article delta only.
Output Rules
Keep outputs separate by path:
knowledge/cases/en/YYYY/...andknowledge/cases/zh/YYYY/...for bilingual case records.knowledge/topics/<topic-slug>/...for topic assets.knowledge/articles/en/<topic-slug>.mdfor English-first drafts.knowledge/articles/zh/<topic-slug>.mdfor Chinese adaptations.- reusable scripts under the closest existing tooling path, such as
tools/android/..., plus case-specific executable snapshots underknowledge/cases/artifacts/YYYY/when needed for reproduction.
When context is incomplete, do not emit a fake template. Instead, state what is missing and preserve the pipeline state.
Script Artifact Routing
When a detection finding includes a reusable shell script or command harness:
- create or update the maintained script artifact in the appropriate tools path.
- store the validated script snapshot under
knowledge/cases/artifacts/YYYY/when the script is central to reproducing the case. - capture execution semantics in both English and Chinese case records, including how to run it inside Mira.
- link the script from any topic pattern that depends on it.
- keep articles focused on method and boundaries, not full script dumps, unless the article is explicitly script-centered.
- preserve known-bad invocation forms and parameter pitfalls as case evidence.
Dynamic Topic Protocol
Use this short protocol whenever topic is unclear:
- state the current signal in one sentence.
- propose up to 3 topic directions.
- explain each direction with one discriminator.
- ask the user to confirm or rename the topic.
Quality Bar
Before finishing, verify:
- topic was not predefined without confirmation.
- case, topic, pattern, and article responsibilities stayed separate.
- at least one reusable judgment or next-check idea was surfaced.
- the response kept the English-first publication strategy in mind.