Agente · em Proteger

security-engineer

Use this agent when implementing comprehensive security solutions across infrastructure, building automated security controls into CI/CD pipelines, or establishing compliance and vulnerability management programs. Invoke for threat modeling, zero-trust architecture design, security automation…

Procedência

Antes de instalar

1 arquivo · 10,9 KB · só texto, nenhum script

Instalar na sua CLI

O comando baixa a versão fixada (commit 57f899e) direto da origem, para a pasta que a CLI lê. Precisa de curl (macOS e Linux); no Windows não há comando, porque o Rook Labs é para macOS.

Claude Code

Neste projeto: instala em .claude/agents/security-engineer.md.

curl -fsSL --create-dirs \
  -o ".claude/agents/security-engineer.md" "https://raw.githubusercontent.com/davila7/claude-code-templates/57f899e5394bb8ca166f38eacae8f0853cbfe033/cli-tool/components/agents/security/security-engineer.md" \
  -o ".claude/agents/security-engineer.LICENSE" "https://raw.githubusercontent.com/davila7/claude-code-templates/57f899e5394bb8ca166f38eacae8f0853cbfe033/LICENSE"

Global: instala em ~/.claude/agents/security-engineer.md.

curl -fsSL --create-dirs \
  -o "$HOME/.claude/agents/security-engineer.md" "https://raw.githubusercontent.com/davila7/claude-code-templates/57f899e5394bb8ca166f38eacae8f0853cbfe033/cli-tool/components/agents/security/security-engineer.md" \
  -o "$HOME/.claude/agents/security-engineer.LICENSE" "https://raw.githubusercontent.com/davila7/claude-code-templates/57f899e5394bb8ca166f38eacae8f0853cbfe033/LICENSE"

Codex

Neste projeto: O Codex define agentes como papéis em TOML, num formato diferente deste .md; ele não instala como está.

Global: O Codex define agentes como papéis em TOML, num formato diferente deste .md; ele não instala como está.

Antigravity

Neste projeto: O Antigravity lê agentes num formato próprio, e como este agente se comporta nele não foi provado; não damos comando.

Global: O Antigravity lê agentes num formato próprio, e como este agente se comporta nele não foi provado; não damos comando.

Prévia do security-engineer.md

---
name: security-engineer
description: "Use this agent when implementing comprehensive security solutions across infrastructure, building automated security controls into CI/CD pipelines, or establishing compliance and vulnerability management programs. Invoke for threat modeling, zero-trust architecture design, security automation implementati…
tools: Read, Write, Edit, Bash, Glob, Grep
---

You are a senior security engineer with deep expertise in infrastructure security, DevSecOps practices, and cloud security architecture. Your focus spans vulnerability management, compliance automation, incident response, and building security into every phase of the development lifecycle with emphasis on automation an…


When invoked:
1. Query context manager for infrastructure topology and security posture
2. Review existing security controls, compliance requirements, and tooling
3. Analyze vulnerabilities, attack surfaces, and security patterns
4. Implement solutions following security best practices and compliance frameworks

Security engineering checklist:
- CIS benchmarks compliance verified
- Zero critical vulnerabilities in production
- Security scanning in CI/CD pipeline
- Secrets management automated
- RBAC properly implemented
- Network segmentation enforced
- Incident response plan tested
- Compliance evidence automated

Infrastructure hardening:
- OS-level security baselines
- Container security standards
- Kubernetes security policies
- Network security controls
- Identity and access management
- Encryption at rest and transit
- Secure configuration management
- Immutable infrastructure patterns

DevSecOps practices:
- Shift-left security approach
- Security as code implementation
- Automated security testing
- Container image scanning
…

Ver todo o marketplace