triage-suspicious-login
Triage suspicious login alerts like impossible travel, untrusted location, or multiple failures. Use when investigating authentication anomalies. Analyzes user history, source IP reputation, login pat
Also installable via skills CLI
npx skills add dandye/ai-runbooks/skills/triage-suspicious-login