a2a-security-review
Review agent-to-agent (A2A) / multi-agent-system trust: peer identity and authentication, message integrity,…
Create a shareable single-page infographic / one-pager summarizing a security posture, assessment result, metric set, or program update for a non-technical or executive audience. Use when the ask is "make this presentable / visual / board-ready" rather than a full report.
Claude Code
$ npx -y skills add jassics/awesome-claude-security --skill infographic --agent claude-code
Codex
$ npx skills add jassics/awesome-claude-security --skill infographic -a codex -y
Cursor
$ npx skills add jassics/awesome-claude-security --skill infographic -a cursor -y
Gemini CLI
$ npx skills add jassics/awesome-claude-security --skill infographic -a gemini-cli -y
GitHub Copilot
$ npx skills add jassics/awesome-claude-security --skill infographic -a github-copilot -y
OpenCode
$ npx skills add jassics/awesome-claude-security --skill infographic -a opencode -y
Windsurf
$ npx skills add jassics/awesome-claude-security --skill infographic -a windsurf -y
name: infographic description: >- Create a shareable single-page infographic / one-pager summarizing a security posture, assessment result, metric set, or program update for a non-technical or executive audience. Use when the ask is "make this presentable / visual / board-ready" rather than a full report.
A clean, at-a-glance visual one-pager: a headline message, 3–6 key stats or findings, a simple visual (gauge, severity bars, timeline), and a clear "so what / next steps" footer.
1. Identify the **single message** the one-pager must land. 2. Pick 3–6 supporting data points (counts by severity, posture score, trend, coverage %). Don't crowd it. 3. Choose a layout: hero stat + supporting tiles, or severity bar + callouts. 4. Render: prefer the Excalidraw MCP for an editable visual; otherwise emit `.excalidraw` JSON plus an HTML one-pager (inline CSS, print-friendly) the user can open or convert to PDF. 5. Use a restrained palette and severity-consistent colors (critical=red, high=orange, medium=amber, low=blue).
For a full narrative document use `security-reporting` instead; this skill is for the visual summary. Executive decks (CISO/CTO) compose this skill with `security-reporting`.
A Claude Code plugin marketplace for the full cybersecurity & GenAI-security lifecycle — from recon and threat modeling to detection engineering, GRC, and CISO-level strategy. A pentester knows which OWASP test bends a broken-access-control endpoint.
Review agent-to-agent (A2A) / multi-agent-system trust: peer identity and authentication, message integrity,…
Test the agent execution harness/runtime itself — LangChain/LangGraph, AutoGen, CrewAI, custom ReAct-style loops, or…
Assess an autonomous / tool-using AI agent for security end-to-end: tool privileges, autonomy and approval boundaries, excessive…
Test what an AI agent will actually do without human confirmation, including under injected-goal / prompt-injection scenarios, to…
Review the security of MCP (Model Context Protocol) servers/clients an agent uses: server trust tier, tool/resource description…
Inventory the tools/functions an AI agent can call and audit their privileges, side effects, and approval requirements to find…
Use for authorized security assessment of REST, GraphQL, WebSocket, or SOAP APIs, including discovery, authentication,…
Extract and decrypt Windows DPAPI-protected secrets (Credential Manager, browser logins/cookies, Wi-Fi credentials, KeePass keys)…
Clean and finalize authorized natural-language text intended for readers by auditing suspicious invisible Unicode and rewriting…