armoctl-integrations
Outbound integrations — alert channels (Slack/email/webhook), SIEM forwarders, Jira ticket creation. Use to wire ARMO into external workflows.
Install
With your agent
Install OMGSkills skill "armosec/armoctl:skills/armoctl-integrations" into this agent's normal skills directory: call the OMGSkills MCP get_install_plan tool for your agent and run the script it returns (it installs only the pinned commit and verifies SKILL.md), and stop if MCP or the pin is unavailable. Do not overwrite or change existing skills without asking me.
Manual command
git clone https://github.com/armosec/armoctl /tmp/armoctl && ln -s /tmp/armoctl/skills/armoctl-integrations ~/.claude/skills/armoctl-integrationsFrom README
armoctl-integrations Integrations is where ARMO emits, not consumes. Alert channels deliver events; SIEM forwarders ship logs; Jira lets the agent open tickets directly. Commands alert-channels — Alert channel integrations alert-channels create [guid] — Create an alert channel Flags: --config-file (string) JSON file with channel-specific config (optional) --guid (string) Channel GUID (optional if provided as positional) --type (string) Channel type (slack|email|webhook) (required) fields — Print the integrations resource cheatsheet jira — Jira integration commands jira create-ticket — Create a Jira issue (ticket) Flags: --description (string) Issue description (optional) --field (stringSlice) Extra fields as key=value (repeatable, optional) --issue-type (string) Issue type name (required) --project (string) Project key (required) --summary (string) Issue summary (required) jira fields — List Jira fields available for an issue type Flags: --issue-type (string) Issue type ID (required...
More from this repo
armoctl
ARMO security platform CLI — JSON-first agent-friendly access to runtime incidents, vulnerabilities, posture, risks,...
armoctl-attack-chains
Attack chains — multi-step kill-chain views built by ARMO from runtime + posture signal.
armoctl-cloud-accounts
Cloud account onboarding — list/connect/disconnect ECS accounts.