# Generated by API Evangelist (build-phrasing.py). Our phrasing, not observed demand.
overlay: 1.0.0
info:
  title: API Evangelist conversational phrasing for Palo Alto Networks Threat Vault Threats API
  version: 1.0.0
extends: openapi/palo-alto-networks-threats-api-openapi.yml
actions:
- target: $.info
  update:
    x-apievangelist-phrasing:
      method: generated
      generated: '2026-09-26'
      generator: build-phrasing.py
      label: Generated by API Evangelist
      operations: 2
- target: $.paths['/threats'].get
  update:
    x-apievangelist-phrasing:
      intent: Look up threat signatures
      effect: read
      questions:
      - Which Threat Vault signatures cover a given CVE?
      - Can I find signatures linked to a file's SHA-256 hash?
      - What antivirus signatures were released between two dates?
      instructions:
      - text: Find threat signatures for CVE {cve}.
        slots:
          cve: query.cve
      - text: Look up signatures matching hash {sha256}.
        slots:
          sha256: query.sha256
      - text: List {type} signatures released from {from} to {to}.
        slots:
          type: query.type
          from: query.from
          to: query.to
      method: generated
      generated: '2026-09-26'
- target: $.paths['/threats/history'].get
  update:
    x-apievangelist-phrasing:
      intent: Get the version history of a signature
      effect: read
      questions:
      - How has a specific threat signature changed over time?
      - Which content versions modified a given signature?
      instructions:
      - text: Get the history of {type} signature {id}.
        slots:
          type: query.type
          id: query.id
      - text: Show all previous releases of signature {id} of type {type}.
        slots:
          id: query.id
          type: query.type
      method: generated
      generated: '2026-09-26'