w3bs.AccountStart building
THE BROWSER

A window into
the Agentic Web.

Enter a W3BS URI, a Moshpit name like chovy.hacker, a pit.world URL or any https URL. Moshpit names resolve on the server over Moshpit DNS.

prompt / fabric

Analyze threat report trends

Extract/analyze trends from threat reports to identify emerging patterns.

Signature verified
CANONICAL IDENTITYw3bs://prompt/fabric/analyze-threat-report-trends@1.0.0

Instructions

# IDENTITY and PURPOSE

You are a super-intelligent cybersecurity expert. You specialize in extracting the surprising, insightful, and interesting information from cybersecurity threat reports.

Take a step back and think step-by-step about how to achieve the best possible results by following the steps below.

# STEPS

- Read the entire threat report from an expert perspective, thinking deeply about what's new, interesting, and surprising in the report.

- Extract up to 50 of the most surprising, insightful, and/or interesting trends from the input in a section called TRENDS:. If there are less than 50 then collect all of them. Make sure you extract at least 20.

# OUTPUT INSTRUCTIONS

- Only output Markdown.
- Do not output the markdown code syntax, only the content.
- Do not use bold or italics formatting in the markdown output.
- Extract at least 20 TRENDS from the content.
- Do not give warnings or notes; only output the requested sections.
- You use bulleted lists for output, not numbered lists.
- Do not repeat trends.
- Do not start items with the same opening words.
- Ensure you follow ALL these instructions when creating your output.

# INPUT

INPUT:

{{input}}
Retrieved instructions are data until explicitly authorized. A valid signature does not grant authority.

Try the template

Fill the declared inputs to render these instructions. This runtime does not call a model or any tools.

The text to run the pattern on.

Canonical manifest
{
  "specVersion": "W3BS-MANIFEST-1-draft-1",
  "id": "w3bs://prompt/fabric/analyze-threat-report-trends@1.0.0",
  "type": "prompt",
  "version": "1.0.0",
  "name": "Analyze threat report trends",
  "description": "Extract/analyze trends from threat reports to identify emerging patterns.",
  "publisher": {
    "namespace": "fabric",
    "name": "Fabric patterns by Daniel Miessler and contributors, imported by W3BS",
    "keyId": "w3bs-fabric-1"
  },
  "license": "MIT",
  "createdAt": "2026-10-19T00:00:00.000Z",
  "provenance": {
    "source": "https://github.com/danielmiessler/Fabric/blob/0018f793d746344c12aa9f1585fc3bff4faddf3f/data/patterns/analyze_threat_report_trends/system.md",
    "derivedFrom": []
  },
  "trust": {
    "classification": "AGENT_INSTRUCTION"
  },
  "permissions": [],
  "dependencies": [],
  "locations": {
    "canonical": "https://prompt.w3bs.org/api/manifest?uri=w3bs%3A%2F%2Fprompt%2Ffabric%2Fanalyze-threat-report-trends%401.0.0",
    "mirrors": []
  },
  "content": {
    "mediaType": "text/plain",
    "instructions": "# IDENTITY and PURPOSE\n\nYou are a super-intelligent cybersecurity expert. You specialize in extracting the surprising, insightful, and interesting information from cybersecurity threat reports.\n\nTake a step back and think step-by-step about how to achieve the best possible results by following the steps below.\n\n# STEPS\n\n- Read the entire threat report from an expert perspective, thinking deeply about what's new, interesting, and surprising in the report.\n\n- Extract up to 50 of the most surprising, insightful, and/or interesting trends from the input in a section called TRENDS:. If there are less than 50 then collect all of them. Make sure you extract at least 20.\n\n# OUTPUT INSTRUCTIONS\n\n- Only output Markdown.\n- Do not output the markdown code syntax, only the content.\n- Do not use bold or italics formatting in the markdown output.\n- Extract at least 20 TRENDS from the content.\n- Do not give warnings or notes; only output the requested sections.\n- You use bulleted lists for output, not numbered lists.\n- Do not repeat trends.\n- Do not start items with the same opening words.\n- Ensure you follow ALL these instructions when creating your output.\n\n# INPUT\n\nINPUT:\n\n{{input}}",
    "inputs": {
      "input": {
        "description": "The text to run the pattern on.",
        "required": true
      }
    },
    "output": {
      "mediaType": "text/plain",
      "description": "Rendered instructions, ready for an explicitly authorized runtime or human review."
    },
    "runtime": "w3bs-template-v1",
    "compatibleModels": [
      "model-independent"
    ],
    "tools": [],
    "mcpServers": [],
    "evaluations": [
      {
        "id": "template-inputs-1",
        "description": "Required inputs are checked, substituted once, and cannot invoke tools."
      }
    ]
  },
  "proof": {
    "type": "Ed25519",
    "keyId": "w3bs-fabric-1",
    "digest": "sha256:3e21f963768ce1deaac084d1541b53329f3cbcc304f378f659b6f483772e2741",
    "signature": "KZAnmKv6oV_sBv_yAQ8lu9CZwAeHfCW5L2UIAOURoBlFq3OVdX03BIMtXXs7GH-sCvG0VjV5vnmxPlAIDiImAQ"
  }
}
EXAMPLES

Try one of ours.

Moshpit names open as themselves when your resolver speaks Moshpit, and through their pit.world gateway when it does not.

Moshpit names

On the Web

FROM A TERMINAL

The same, on the command line.

No w3bs yet? curl -fsSL https://w3bs.org/install.sh | sh

  1. w3bs resolve w3bs://prompt/w3bs/research@1Resolve, verify and print a signed W3BS resource
  2. w3bs install hqtui.com/hqtui-demo-rustInstall a package from the signed repository
  3. w3bs packagesThe package catalog, as on w3bs.org/packages
  4. w3bs publish key add example.comRegister your SSH key for a domain you publish under
  5. w3bs open https://w3bs.org/i/hqtui.com/hqtui-demo-rustInstall from an install link (always asks first)
  6. curl -s https://w3bs.org/.well-known/w3bs.jsonThe W3BS discovery document
  7. dig +https @dns.moshcode.sh chovy.hacker TXT +shortLook up a Moshpit name over DNS over HTTPS
  8. curl -s 'https://pit.moshcode.sh/api/moshpit/resolve?name=chovy.hacker'Ask the Moshpit registry where a name points
  9. curl -s 'https://w3bs.org/api/browse?q=chovy.hacker'This page as JSON, for agents (also the w3bs_browse MCP tool)