foundry-security-spec — Claude Code skill
A skill that walks your agent through implementing Cisco's Foundry spec: a multi-role system for finding and validating vulnerabilities. Useful when you're building your own evaluation pipeline.
npx skills add reason-machines/security-skills --skill foundry-security-spec -a claude-codeWhat foundry-security-spec does
Foundry is Cisco's open specification for agentic security evaluation. It lays out eight core agent roles (Orchestrator, Planner, Navigator, Detector, Explorer, Validator, Investigator, Publisher) plus five extension roles that cooperate to surface, confirm and report findings. Nothing gets installed here — it's a blueprint for designing that system around your own project.
The workflow is spec-driven. You read constitution.md, which holds 11 principles, then install @github/spec-kit so a .specify/ directory appears in the project. The constitution goes to .specify/memory/constitution.md and gets registered with /speckit.constitution; the seed spec lands in specs/001-foundry/spec.md. From there /speckit.clarify asks about your environment — version control, issue tracker, LLM provider, datastore, isolation runtime, deployment target. Once those answers are in, /speckit.specify, /speckit.plan, /speckit.tasks and /speckit.implement carry it to code.
Skip npm and spec-kit and none of the steps run. The integration questions are yours to answer too; the skill won't guess them. For a first build the spec advises leaving the extension roles out.
What it helps with
- design a multi-role security evaluation system from scratch
- split vulnerability discovery into stages with evidence checks
- lock project invariants into a constitution before writing code
- connect detection findings to CodeGuard rule format
- produce a spec and task backlog for a security agent
Example prompts for the agent
- Implement the Foundry specification for our security evaluation system, step by step
- Set up the Detector and Validator agent roles from
spec.md - Walk me through
/speckit.clarifyand fill in the decisions for our environment
How to install foundry-security-spec
1Skills CLI (Vercel)
npx skills add reason-machines/security-skills --skill foundry-security-spec -a claude-code2Manually: put the files in place
~/.claude/skills/foundry-security-spec/SKILL.mdCopy the whole skill folder; for one project use .claude/skills/foundry-security-spec/
1Skills CLI (Vercel)
npx skills add reason-machines/security-skills --skill foundry-security-spec -a codex2Manually: put the files in place
.agents/skills/foundry-security-spec/SKILL.mdFor all projects use ~/.agents/skills/
1Skills CLI (Vercel)
npx skills add reason-machines/security-skills --skill foundry-security-spec -a cursor2Manually: put the files in place
.cursor/skills/foundry-security-spec/SKILL.mdCursor also reads .agents/skills/ and .claude/skills/
1GitHub CLI
gh skill install reason-machines/security-skills foundry-security-spec2Manually: put the files in place
.github/skills/foundry-security-spec/SKILL.md1Skills CLI (Vercel)
npx skills add reason-machines/security-skills --skill foundry-security-spec -a gemini-cli2Platform CLI
gemini skills install https://github.com/reason-machines/security-skills --path skills/foundry-security-specManually: put the files in place
.devin/skills/foundry-security-spec/SKILL.mdThe legacy .windsurf/skills/ path still works
Skills CLI (Vercel)
npx skills add reason-machines/security-skills --skill foundry-security-spec -a opencodeClaude.ai
Zip the folder and upload it in Settings → Capabilities → Skills
Step by step, with commands for each platform: How to install skills in Claude Code: five ways
Questions about foundry-security-spec
How do I install foundry-security-spec in Claude Code?
Run npx skills add reason-machines/security-skills --skill foundry-security-spec -a claude-code. The skill lands at ~/.claude/skills/foundry-security-spec/SKILL.md.
What does foundry-security-spec do?
It guides your agent through implementing the Foundry spec: eight core roles, a finding lifecycle, atomic claim coordination and budget limits. You end up with your own spec and work plan.
What do I need before starting?
@github/spec-kit installed, plus answers to the /speckit.clarify questions about version control, tracker, LLM provider, datastore and isolation runtime.
