Cybersecurity Skills: Master Agentic Router & Security Suite

A unified orchestrator and autonomous router across 29 professional cybersecurity skills. This skill automatically maps user security requests to the exact methodology, grep patterns, audit checklist, and reporting standards.

The execution invariant is:

$$\text{User Request / Security Task} \xrightarrow{\text{Dynamic Intent Router}} \text{Domain Skill DAG} \xrightarrow{\text{Auth Gate}} \text{Targeted Audit} \xrightarrow{\text{Triaged Findings}} \text{Actionable Deliverable}$$

⚡ Dynamic Intent Routing Matrix

When a security task is received, identify the primary domain and invoke or reference the matching sub-skill:

🛡️ Core Operating Principles & Ethical Safeguards

1. Mandatory Authorization Gate:
   • For all offensive or invasive skills (`recon`, `osint-recon`, `web-pentest`, `red-team-engagement`), confirm explicit written scope or self-ownership before running commands.
   • Refuse immediately if the target is unowned, unauthorized, or destructive.
2. No Assumptions — Evidence-Based Findings:
   • Never classify a finding based purely on keyword existence. Read the control flow, verify call stacks, and check if upstream middleware or framework sanitizers neutralize the risk.
   • Every reported finding must provide:
     • Exact file path and line numbers
     • Vulnerable code snippet
     • Concrete exploit mechanism / attack vector
     • Severity rating (CVSS or Critical / High / Medium / Low / Informational)
     • Prescriptive, copy-pasteable remediation guidance
3. Closed-Loop Resolution:
   • Feed audit findings into `finding-triage` to generate standardized ticketing metadata.
   • Use `security-comms` when findings need to be communicated to non-technical stakeholders, management, or customers.

🚀 Invocation & Execution Across AI Hosts

Claude Code / Desktop

Invoke directly via slash command or natural query: ```bash /owasp-audit /cloud-audit

Or run conversational routing:

"Run a complete security audit on our authentication routes" ```

Google Antigravity & Gemini CLI

The master router activates automatically when security tasks are identified. Run the underlying scripts directly with `bun`: ```bash bun ./bin/cli.js route "check our Dockerfiles and k8s manifests" ```

Cursor IDE

Rules are installed under `.cursor/rules/<skill-name>.mdc` and trigger contextually when relevant code files (e.g., auth handlers, terraform files, Dockerfiles) are edited.

OpenAI Codex / ChatGPT

Adapted instructions live in `adapters/codex/<skill-name>.md` and can be loaded directly as custom instructions or system prompts.