agent-security-engineer — Claude Code skill: what it does and install
Guides infrastructure security, CIS benchmark compliance, and CI/CD security scanning. Helps teams introduce DevSecOps and zero-trust controls.
npx skills add Tony363/SuperClaude --skill agent-security-engineer -a claude-codeWhat agent-security-engineer does
This skill directs your coding assistant to act as a DevSecOps and infrastructure security engineer. It focuses on validating CIS benchmark compliance and setting up automated secrets workflows.
The agent uses file manipulation tools like Read and MultiEdit, standard shell commands via Bash, and security utilities such as nmap and metasploit. These external binaries must be available in your system path, or network scanning and penetration testing tasks will fail.
What it helps with
- embed automated security scans into CI/CD pipelines
- audit infrastructure configs against CIS benchmarks
- configure RBAC policies and automated secrets management
- design network segmentation rules across environments
Example prompts for the agent
- Audit our infrastructure configuration against CIS benchmarks
- Add security vulnerability scanning steps into our CI/CD workflow
- Scan exposed network ports with nmap and evaluate risks
How to install agent-security-engineer
1Skills CLI (Vercel)
npx skills add Tony363/SuperClaude --skill agent-security-engineer -a claude-code2Manually: put the files in place
~/.claude/skills/agent-security-engineer/SKILL.mdCopy the whole skill folder; for one project use .claude/skills/agent-security-engineer/
1Skills CLI (Vercel)
npx skills add Tony363/SuperClaude --skill agent-security-engineer -a codex2Manually: put the files in place
.agents/skills/agent-security-engineer/SKILL.mdFor all projects use ~/.agents/skills/
1Skills CLI (Vercel)
npx skills add Tony363/SuperClaude --skill agent-security-engineer -a cursor2Manually: put the files in place
.cursor/skills/agent-security-engineer/SKILL.mdCursor also reads .agents/skills/ and .claude/skills/
1GitHub CLI
gh skill install Tony363/SuperClaude agent-security-engineer2Manually: put the files in place
.github/skills/agent-security-engineer/SKILL.md1Skills CLI (Vercel)
npx skills add Tony363/SuperClaude --skill agent-security-engineer -a gemini-cli2Platform CLI
gemini skills install https://github.com/Tony363/SuperClaude --path .claude/skills/agent-security-engineerManually: put the files in place
.devin/skills/agent-security-engineer/SKILL.mdThe legacy .windsurf/skills/ path still works
Skills CLI (Vercel)
npx skills add Tony363/SuperClaude --skill agent-security-engineer -a opencodeClaude.ai
Zip the folder and upload it in Settings → Capabilities → Skills
Step by step, with commands for each platform: How to install skills in Claude Code: five ways
Questions about agent-security-engineer
How do I install agent-security-engineer in Claude Code?
Run npx skills add Tony363/SuperClaude --skill agent-security-engineer -a claude-code. The skill configuration saves to ~/.claude/skills/agent-security-engineer/SKILL.md.
What does agent-security-engineer do?
It guides DevSecOps adoption, helps eliminate critical production vulnerabilities, and configures automated pipeline checks. It also assists with network segmentation and RBAC models.
Which command-line tools are required?
The skill relies on Bash along with external security utilities nmap and metasploit for infrastructure scanning tasks.
Source text
SKILL.md · MIT
--- name: agent-security-engineer description: Expert infrastructure security engineer specializing in DevSecOps, cloud security, and compliance frameworks. Masters security automation, vulnerability management, and zero-trust architecture with emphasis on shift-left security practices. --- # Security Engineer Agent You are a senior security engineer with deep expertise in infrastructure security, DevSecOps practices, and cloud security architecture. Your focus spans vulnerability management, compliance automation, incident response, and building security into every phase of the development lifecycle with emphasis on automation and continuous improvement. ## Domain Infrastructure & DevOps ## Tools Primary: Read, Write, MultiEdit, Bash, nmap, metasploit ## Key Capabilities - CIS benchmarks compliance verified - Zero critical vulnerabilities in production - Security scanning in CI/CD pipeline - Secrets management automated - RBAC properly implemented - Network segmentation enforced ## Activation This agent activates for tasks involving: - security engineer related work - Domain-specific implementation and optimization - Technical guidance and best practices ## Integration Works with other agents for: - Cross-functional collaboration - Domain expertise sharing - Quality validation
© Tony363 · MIT · Tony363/SuperClaude