Xsoar Pack Dev
Cortex XSOAR content pack development lifecycle - create packs, integrations, scripts, playbooks, run demisto-sdk lint/validate/pre-commit, build zip packs, manage versions and release notes, run unit tests, deploy to XSOAR instances, manage git branches/tags, handle marketplace vs local pack workflows. Use when the user wants to develop, test, build, validate, deploy, or manage XSOAR content packs.
Install
npx skills add mdrobniu/xsoar-pack-dev-skill --skill xsoar-pack-devgit clone --depth 1 https://github.com/mdrobniu/xsoar-pack-dev-skill.git /tmp/xsoar-pack-dev-skill
mkdir -p ~/.claude/skills
cp -r /tmp/xsoar-pack-dev-skill/. ~/.claude/skills/xsoar-pack-devPersonal skills live in ~/.claude/skills. Use .claude/skills in a project folder to share a skill with your team.
From the SKILL.md
# Cortex XSOAR Pack Development Skill You are an expert Cortex XSOAR content developer. You help users create, develop, test, validate, build, and deploy XSOAR content packs following official Palo Alto Networks standards. **Target Platform**: XSOAR 6.x (demisto-py API). XSOAR 8/XSIAM UI API is NOT supported by this skill yet. ## MANDATORY WORKFLOW ORDER **NEVER skip or reorder these steps:** 1. **Survey** (Phase 0) -> ASK user: local or marketplace? XSOAR type? Get all config. STOP and WAIT for answers. 2. **Repo Setup** (Phase 1) -> Clone content fork OR content-ci-cd-template. Git init, origin remote, feature branch. 3. **Create** (Phase 1b) -> Pack structure via `demisto-sdk init`, metadata, release notes, .pack-ignore, .secrets-ignore 4. **Develop** (Phase 2) -> Write code AND unit tests TOGETHER. Every new function gets a test. 5. **Docs** (Phase 2b) -> Update README.md + _description.md + release notes for EVERY feature/change. Detailed markdown with tables. 6. **Test** (Phase 3a) -> Copy test deps (CommonServerPython, demistomock), run pytest. ALL must pass. 7. **Lint & Format** (Phase 3b) -> Run `ruff check --ignore=F403,F405` AND `ruff format` or `demisto-sdk pre-commit`. 8. **Validate** (Phase 3c) -> Run `demisto-sdk validate`. Fix all errors. 9. **Commit** (Phase 4) -> ONLY after all above pass. Never commit before tests/lint/validate. 10. **Merge + Tag** (Phase 5) -> Merge feature branches to main. Tag release on main. Bump version.
Details
- Skill name
xsoar-pack-dev- Repository
- mdrobniu/xsoar-pack-dev-skill
- License
- Apache-2.0
- Repo updated
- 17 March 2026
FAQ
What does the Xsoar Pack Dev skill do?
Cortex XSOAR content pack development lifecycle - create packs, integrations, scripts, playbooks, run demisto-sdk lint/validate/pre-commit, build zip packs, manage versions and release notes, run unit tests, deploy to XSOAR instances, manage git branches/tags, handle marketplace vs local pack workflows. Use when the user wants to develop, test, build, validate, deploy, or manage XSOAR content packs.
How do I install the Xsoar Pack Dev skill?
skills CLI (Claude Code, Cursor, Codex and more): npx skills add mdrobniu/xsoar-pack-dev-skill --skill xsoar-pack-dev. Skills go in ~/.claude/skills (personal) or .claude/skills (project), and Claude loads them automatically when a task matches the description.
Is Xsoar Pack Dev popular?
It lives in mdrobniu/xsoar-pack-dev-skill, which has 6 GitHub stars and 1 forks.
Related skills
Affiliate Check
5Gingg7260/affiliate-skills
Live affiliate program data from list.affitor.com. Search programs, compare commissions, check cookie days, find top performers. Use when researching affiliate programs, comparing options, or checking program details. Persistent daemon with cache — first call starts server (~2s), subsequent calls ~100ms.
Roast
6janderswag/roast-skill
The free Roast & Rebuild Claude Code skill. Runs a 6-module audit on the current local repository — Roast, Security, Architecture, Customer Flow, Growth, Founder Briefing. Every finding cites file:line evidence. Same opinionated voice as the paid $19 audit at roastrebuild.com. Use when: "roast my repo", "audit this", "what's wrong with my code", "security check", "what should I fix next".
Audit Codebase
6bogenc/audit-codebase
Audit a codebase for security vulnerabilities by first mapping its attack surface (reconnaissance), then spawning specialized parallel sub-agents that hunt for specific vulnerability classes, each armed with the matching reference file bundled in this skill. Use this whenever the user wants a security review, a vulnerability scan, an audit, a pentest-style pass, or asks "is this code safe / exploitable", "check X for vulnerabilities", "review the auth", or points at a repo, service, or directory and asks what could go wrong. Trigger even when the user names only a stack ("audit my Django API")
Glb Buildings
6hec-ovi/glb-buildings-skill
Generate building GLBs for Unreal Engine, Unity and three.js by editing a named project through the `buildings` CLI. Stacks of floor bands become one validated glTF file, cheap enough to place by the thousand, with a blueprint preview the human can click. Use whenever the user wants to create, edit, rebuild or preview a building, a tower, a facade, a city block, or a GLB of any structure.
Code Animations
5beriki770-ship-it/code-animations
Make "code-rendered" animated videos where a program draws every frame (Canvas 2D + procedural Web Audio), rendered headless to MP4 in 16:9 / 9:16 / 4:5 from one timeline. Use for animated explainers, technical walkthroughs, diagrams in motion, and procedural sound or music, where the output should be editable code and not generated pixels.
Furusato Nozei
4tahodev/kurashi-skill
給与収入や課税所得からふるさと納税の寄附上限額(自己負担2,000円の目安)を計算する。ふるさと納税、寄附上限、寄附金控除、ワンストップ特例の相談に対応。API不要の純粋計算。確定申告書の作成や個別の税務判断は対象外。
Browse the most popular Claude skills, all software development skills, or write your own with the skills generator.