deploy

skills/sigma/SKILL.md

@@ -0,0 +1,48 @@
+---
+name: sigma-routes
+description: Handle 3 OpenAPI operation(s) under /v1/sigma for the sigma route group.
+---
+
+# sigma API Routes
+
+Handle 3 OpenAPI operation(s) under /v1/sigma for the sigma route group.
+
+Use the generated operation tools to make real API calls. Do not invent API responses.
+If a tool reports missing setup, return the exact setup field name to the caller.
+For write, update, or delete operations, state the intended action before calling the tool.
+
+## Operations
+
+### post_sigma_saved_queries_id
+
+- Operation ID: `post_sigma_saved_queries_id`
+- Route: `POST /v1/sigma/saved_queries/{id}`
+- Mode: WRITE
+- Summary: Update an existing Sigma Query
+- Parameters:
+  - `id` in `path` required
+- Body: JSON request body accepted.
+
+### get_sigma_scheduled_query_runs
+
+- Operation ID: `get_sigma_scheduled_query_runs`
+- Route: `GET /v1/sigma/scheduled_query_runs`
+- Mode: READ
+- Summary: List all scheduled query runs
+- Parameters:
+  - `ending_before` in `query`
+  - `expand` in `query`
+  - `limit` in `query`
+  - `starting_after` in `query`
+- Body: JSON request body accepted.
+
+### get_sigma_scheduled_query_runs_scheduled_query_run
+
+- Operation ID: `get_sigma_scheduled_query_runs_scheduled_query_run`
+- Route: `GET /v1/sigma/scheduled_query_runs/{scheduled_query_run}`
+- Mode: READ
+- Summary: Retrieve a scheduled query run
+- Parameters:
+  - `expand` in `query`
+  - `scheduled_query_run` in `path` required
+- Body: JSON request body accepted.