Huntress Escalations — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Huntress Escalations (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Escalations are high-priority notifications from the Huntress SOC to MSP partners. When the Huntress SOC identifies activity requiring partner attention or action, they create an escalation. MSPs must review escalations promptly and resolve them after taking appropriate action.
Escalations from the Huntress SOC indicate urgency. Treat all open escalations as time-sensitive communications requiring prompt review.
huntress_escalations_listParameters:
organization_id — Filter by organizationstatus — Filter by statuspage_token — Pagination tokenExample response:
{
"escalations": [
{
"id": "esc-321",
"title": "Active Ransomware — Immediate Action Required",
"severity": "critical",
"status": "open",
"organization_id": "org-456",
"created_at": "2026-02-26T09:00:00Z",
"summary": "Huntress SOC has identified active ransomware encryption on ACME-WS-042. Immediate network isolation recommended."
}
],
"next_page_token": null
}huntress_escalations_getParameters:
escalation_id — The escalation IDExample response:
{
"escalation": {
"id": "esc-321",
"title": "Active Ransomware — Immediate Action Required",
"severity": "critical",
"status": "open",
"organization_id": "org-456",
"created_at": "2026-02-26T09:00:00Z",
"summary": "Huntress SOC has identified active ransomware encryption on ACME-WS-042. Immediate network isolation recommended.",
"details": "The Huntress SOC detected file encryption activity consistent with ransomware...",
"recommended_actions": [
"Isolate ACME-WS-042 from the network immediately",
"Check for lateral movement to other endpoints",
"Preserve forensic evidence before remediation"
],
"related_incidents": ["inc-789"]
}
}huntress_escalations_resolveParameters:
escalation_id — The escalation to resolvehuntress_escalations_listrelated_incidentshuntress_incidents_getCause: Invalid escalation ID Solution: List escalations to verify the correct ID
Cause: Attempting to resolve an already-resolved escalation Solution: Check escalation status first
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.