<?xml version="1.0" encoding="utf-8"?>
<feed xmlns="http://www.w3.org/2005/Atom">
    <id>https://docs.tenzir.com/changelog/tenzir-skills</id>
    <title>Tenzir Skills Changelog</title>
    <updated>2026-06-05T00:00:00.000Z</updated>
    <generator>Tenzir Changelog</generator>
    <author>
        <name>Tenzir</name>
        <uri>https://tenzir.com</uri>
    </author>
    <link rel="alternate" href="https://docs.tenzir.com/changelog/tenzir-skills"/>
    <link rel="self" href="https://docs.tenzir.com/changelog/tenzir-skills.xml"/>
    <subtitle>Release notes and changelog for Tenzir Skills</subtitle>
    <icon>https://docs.tenzir.com/favicon.svg</icon>
    <entry>
        <title type="html"><![CDATA[Tenzir Skills v2.1.0]]></title>
        <id>https://docs.tenzir.com/changelog/tenzir-skills/v2-1-0</id>
        <link href="https://docs.tenzir.com/changelog/tenzir-skills/v2-1-0"/>
        <updated>2026-06-05T00:00:00.000Z</updated>
        <summary type="html"><![CDATA[This release improves agent guidance for package lifecycle management and Google SecOps UDM workflows. It helps agents choose the right package surfaces while making UDM field name differences explicit for mapping and detection use cases.]]></summary>
        <content type="html"><![CDATA[<p>This release improves agent guidance for package lifecycle management and Google SecOps UDM workflows. It helps agents choose the right package surfaces while making UDM field name differences explicit for mapping and detection use cases.</p>

<h2>Features</h2>

<h3>UDM field name forms for mapping and YARA-L</h3>
<p><small>Jun 4, 2026 · <a href="https://github.com/mavam">@mavam</a>, <a href="https://github.com/codex">@codex</a> · <a href="https://github.com/tenzir/skills/pull/12">#12</a></small></p>
<p>The <code>tenzir-google-udm</code> skill now shows both UDM field spellings when they differ, so mapping and detection workflows can use the same reference.</p>
<p>For example, generated field headings now show <code>event_type</code> / <code>eventType</code> and <code>security_result</code> / <code>securityResult</code>. Use the right side when mapping logs into UDM event or entity objects for Google SecOps UDM API ingestion; use the left side in YARA-L, Detect Engine, CBN, and other dotted field-path contexts.</p>

<h2>Changes</h2>

<h3>Package lifecycle management focus</h3>
<p><small>Jun 5, 2026 · <a href="https://github.com/mavam">@mavam</a>, <a href="https://github.com/codex">@codex</a> · <a href="https://github.com/tenzir/skills/pull/13">#13</a></small></p>
<p>The <code>tenzir-manage-packages</code> skill now focuses on package lifecycle management instead of package content development.</p>
<p>It routes agents through package surfaces such as manifests, UDO files, pipelines, examples, tests, changelog entries, and publishing while leaving operator implementation details to the relevant docs or specialized skills.</p>
]]></content>
        <published>2026-06-05T00:00:00.000Z</published>
    </entry>
    <entry>
        <title type="html"><![CDATA[Tenzir Skills v2.0.0]]></title>
        <id>https://docs.tenzir.com/changelog/tenzir-skills/v2-0-0</id>
        <link href="https://docs.tenzir.com/changelog/tenzir-skills/v2-0-0"/>
        <updated>2026-06-04T00:00:00.000Z</updated>
        <summary type="html"><![CDATA[This release consolidates Tenzir package development into the new tenzir-create-package skill, replacing the older parser and OCSF mapping workflows with one broader package creation workflow. It also adds a generated Google SecOps UDM skill for schema reference and normalization guidance.]]></summary>
        <content type="html"><![CDATA[<p>This release consolidates Tenzir package development into the new tenzir-create-package skill, replacing the older parser and OCSF mapping workflows with one broader package creation workflow. It also adds a generated Google SecOps UDM skill for schema reference and normalization guidance.</p>

<h2>Breaking Changes</h2>

<h3>Consolidated Tenzir package creation skill</h3>
<p><small>May 27, 2026 · <a href="https://github.com/mavam">@mavam</a>, <a href="https://github.com/codex">@codex</a></small></p>
<p>The package creation workflow is now centered on <code>tenzir-create-package</code>, a single skill for building library-quality Tenzir packages with UDOs, tests, examples, disabled-by-default pipelines, inputs, contexts, and optional OCSF mappings.</p>
<p>Before:</p>
<pre><code class="language-sh">npx skills add tenzir/skills@tenzir-create-parser-package
npx skills add tenzir/skills@tenzir-create-ocsf-mapping
</code></pre>
<p>After:</p>
<pre><code class="language-sh">npx skills add tenzir/skills@tenzir-create-package
</code></pre>
<p>Use the new skill for parser package work, OCSF mapping work, and broader package development.</p>

<h2>Features</h2>

<h3>Add Google UDM skill</h3>
<p><small>Jun 3, 2026 · <a href="https://github.com/mavam">@mavam</a>, <a href="https://github.com/codex">@codex</a></small></p>
<p>Added <code>tenzir-google-udm</code>, a generated Google SecOps UDM schema and
normalization guidance skill derived from the canonical <code>googleapis/googleapis</code>
UDM and Entity protocol buffers plus targeted Google SecOps usage guidance.</p>
]]></content>
        <published>2026-06-04T00:00:00.000Z</published>
    </entry>
    <entry>
        <title type="html"><![CDATA[Tenzir Skills v1.0.0]]></title>
        <id>https://docs.tenzir.com/changelog/tenzir-skills/v1-0-0</id>
        <link href="https://docs.tenzir.com/changelog/tenzir-skills/v1-0-0"/>
        <updated>2026-05-12T00:00:00.000Z</updated>
        <summary type="html"><![CDATA[The Tenzir skill collection is now available as its initial stable release. This release establishes the shared skill set as the stable baseline for coding agents working in and around the Tenzir ecosystem.]]></summary>
        <content type="html"><![CDATA[<p>The Tenzir skill collection is now available as its initial stable release. This release establishes the shared skill set as the stable baseline for coding agents working in and around the Tenzir ecosystem.</p>

<h2>Features</h2>

<h3>Initial stable skill collection</h3>
<p><small>May 8, 2026 · <a href="https://github.com/mavam">@mavam</a>, <a href="https://github.com/codex">@codex</a></small></p>
<p>The Tenzir skill collection is now published as its initial stable release for v1.0.0.</p>
<p>This release establishes the shared skill set as the stable baseline for coding agents working in and around the Tenzir ecosystem.</p>
]]></content>
        <published>2026-05-12T00:00:00.000Z</published>
    </entry>
</feed>