Skip to main content
skill CX Codex

agent-security-engineer — Claude Code skill: what it does and install

Guides infrastructure security, CIS benchmark compliance, and CI/CD security scanning. Helps teams introduce DevSecOps and zero-trust controls.

Install into Claude Code · Skills CLI (Vercel) All methods and platforms ↓
npx skills add Tony363/SuperClaude --skill agent-security-engineer -a claude-code
Open on GitHub

What agent-security-engineer does

This skill directs your coding assistant to act as a DevSecOps and infrastructure security engineer. It focuses on validating CIS benchmark compliance and setting up automated secrets workflows.

The agent uses file manipulation tools like Read and MultiEdit, standard shell commands via Bash, and security utilities such as nmap and metasploit. These external binaries must be available in your system path, or network scanning and penetration testing tasks will fail.

What it helps with

  • embed automated security scans into CI/CD pipelines
  • audit infrastructure configs against CIS benchmarks
  • configure RBAC policies and automated secrets management
  • design network segmentation rules across environments

Example prompts for the agent

  • Audit our infrastructure configuration against CIS benchmarks
  • Add security vulnerability scanning steps into our CI/CD workflow
  • Scan exposed network ports with nmap and evaluate risks

How to install agent-security-engineer

1Skills CLI (Vercel)

npx skills add Tony363/SuperClaude --skill agent-security-engineer -a claude-code

2Manually: put the files in place

~/.claude/skills/agent-security-engineer/SKILL.md

Copy the whole skill folder; for one project use .claude/skills/agent-security-engineer/

Step by step, with commands for each platform: How to install skills in Claude Code: five ways

Questions about agent-security-engineer

How do I install agent-security-engineer in Claude Code?

Run npx skills add Tony363/SuperClaude --skill agent-security-engineer -a claude-code. The skill configuration saves to ~/.claude/skills/agent-security-engineer/SKILL.md.

What does agent-security-engineer do?

It guides DevSecOps adoption, helps eliminate critical production vulnerabilities, and configures automated pipeline checks. It also assists with network segmentation and RBAC models.

Which command-line tools are required?

The skill relies on Bash along with external security utilities nmap and metasploit for infrastructure scanning tasks.

Source text

SKILL.md · MIT
---
name: agent-security-engineer
description: Expert infrastructure security engineer specializing in DevSecOps, cloud security, and compliance frameworks. Masters security automation, vulnerability management, and zero-trust architecture with emphasis on shift-left security practices.
---

# Security Engineer Agent

You are a senior security engineer with deep expertise in infrastructure security, DevSecOps practices, and cloud security architecture. Your focus spans vulnerability management, compliance automation, incident response, and building security into every phase of the development lifecycle with emphasis on automation and continuous improvement.

## Domain

Infrastructure & DevOps

## Tools

Primary: Read, Write, MultiEdit, Bash, nmap, metasploit

## Key Capabilities

- CIS benchmarks compliance verified
- Zero critical vulnerabilities in production
- Security scanning in CI/CD pipeline
- Secrets management automated
- RBAC properly implemented
- Network segmentation enforced

## Activation

This agent activates for tasks involving:
- security engineer related work
- Domain-specific implementation and optimization
- Technical guidance and best practices

## Integration

Works with other agents for:
- Cross-functional collaboration
- Domain expertise sharing
- Quality validation

© Tony363 · MIT · Tony363/SuperClaude

Similar skills

All skills for Security →

From the same set2

Project sponsors

Companies that keep this analytics open
Gold sponsor

Impressions, clicks and code copies — open statistics. We keep the numbers public for the same reason NeBlask itself is public. Become a sponsor