misp-galaxy
reference corpus · status live · domain SEC (Security and vulnerabilities) · lane A · refresh pinned · tags GLOBAL · THREAT-INTEL · THREAT-ACTORS · CLUSTERS · IOCS
What an agent uses it for
security
Use it
curl -fsSLO https://raw.githubusercontent.com/xerj-org/xerj/corpus-hub/tools/xerj-code/hub/misp-galaxy.jsonxerj corpus add --from ./misp-galaxy.jsonxerj corpus index misp-galaxy then xerj code misp-galaxy "your question"Needs the xerj CLI and a local node running; the copy prompt covers both, checks each step, and shows how to stop only the node you started. No shell: the MCP tool xerj_code_search with corpus: "misp-galaxy", once the corpus is indexed on the node.
Sources and pins
| source | pin | licence | size | review note |
|---|---|---|---|---|
| misp-galaxy | b9675983c99a | CC0-1.0 OR BSD-2-Clause | 57.6 MB / 479 files | Decoded LICENSE.md: JSON clusters dual-licensed 'CC0 1.0 Universal ... or [BSD-2-Clause text]': both permissive/public-domain. GitHub NOASSERTION was the dual-licence wording. ~58MB pure JSON. |
57.6 MB across 479 files. Added 2026-10-13.
Rights
CC0-1.0 OR BSD-2-Clause. Redistribution permitted with attribution per the licence review. The review block records a human opening each licence file at the pin. Detector output is a hint, never the verdict.
Retrieval spot-check (G7)
Not yet spot-checked. Queries are pre-registered in the registry before grading.