a2a-security-review
Review agent-to-agent (A2A) / multi-agent-system trust: peer identity and authentication, message integrity, capability-negotiation trust, and delegation-chain…
Create a shareable single-page infographic / one-pager summarizing a security posture, assessment result, metric set, or program update for a non-technical or executive audience. Use when the ask is "make this presentable / visual / board-ready" rather than a full report.
$ npx -y skills add jassics/awesome-claude-security --skill infographic --agent claude-codeHow it fires
How this skill gets triggered: by you, by Claude, or both.
/infographicContext preview
The summary Claude sees to decide when to auto-load this skill.
Create a shareable single-page infographic / one-pager summarizing a security posture, assessment result, metric set, or program update for a non-technical or executive audience. Use when the ask is "make this presentable / visual / board-ready" rather than a full report.
name: infographic description: >- Create a shareable single-page infographic / one-pager summarizing a security posture, assessment result, metric set, or program update for a non-technical or executive audience. Use when the ask is "make this presentable / visual / board-ready" rather than a full report.
A clean, at-a-glance visual one-pager: a headline message, 3–6 key stats or findings, a simple visual (gauge, severity bars, timeline), and a clear "so what / next steps" footer.
1. Identify the **single message** the one-pager must land. 2. Pick 3–6 supporting data points (counts by severity, posture score, trend, coverage %). Don't crowd it. 3. Choose a layout: hero stat + supporting tiles, or severity bar + callouts. 4. Render: prefer the Excalidraw MCP for an editable visual; otherwise emit `.excalidraw` JSON plus an HTML one-pager (inline CSS, print-friendly) the user can open or convert to PDF. 5. Use a restrained palette and severity-consistent colors (critical=red, high=orange, medium=amber, low=blue).
For a full narrative document use `security-reporting` instead; this skill is for the visual summary. Executive decks (CISO/CTO) compose this skill with `security-reporting`.
A Claude Code plugin marketplace for the full cybersecurity & GenAI-security lifecycle — from recon and threat modeling to detection engineering, GRC, and CISO-level strategy. A pentester knows which OWASP test bends a broken-access-control endpoint.
Repo: jassics/awesome-claude-security
Review agent-to-agent (A2A) / multi-agent-system trust: peer identity and authentication, message integrity, capability-negotiation trust, and delegation-chain…
Test the agent execution harness/runtime itself — LangChain/LangGraph, AutoGen, CrewAI, custom ReAct-style loops, or computer-use/browser-use agents — for…
Assess an autonomous / tool-using AI agent for security end-to-end: tool privileges, autonomy and approval boundaries, excessive agency, memory/state…
Test what an AI agent will actually do without human confirmation, including under injected-goal / prompt-injection scenarios, to validate its autonomy and…
Review the security of MCP (Model Context Protocol) servers/clients an agent uses: server trust tier, tool/resource description and result poisoning,…
Inventory the tools/functions an AI agent can call and audit their privileges, side effects, and approval requirements to find excessive-agency and…