Security & Auditing Skills

ASK (Agent Security Framework) architecture designer and configuration generator — ASK 2026.04. Use this skill whenever the user wants to: design ASK-compliant agent architectures; generate configuration files (Mind/mind.yaml, Gateway policy, Egress proxy denylist, Enforcer sidecar, Delegation bus, Audit log format); understand ASK enforcement layers; design multi-agent systems with proper delegation and isolation; plan deployment topology; or evaluate how enforcement components fit together. Trigger on any mention of ASK architecture design, enforcement layer design, mind.yaml generation, gateway policy creation, egress proxy configuration, enforcer sidecar setup, delegation bus design, ASK deployment topology, multi-agent architecture, agent isolation design, or ASK configuration generation.

ASK (Agent Security Framework) compliance reviewer — ASK 2026.04 (27 tenets). Use this skill whenever the user wants to: review code, specs, architecture, or designs for ASK compliance; check whether an AI agent system satisfies ASK tenets; verify cognitive model separation (Constraints/Session/Identity); assess trust spectrum positioning; audit agent lifecycle and halt governance; check principal model coverage; or evaluate whether enforcement logic is correctly placed outside the agent's trust boundary. Trigger on any mention of ASK compliance review, ASK tenet audit, agent compliance check, cognitive model verification, trust spectrum assessment, enforcement gap identification, ASK checklist, agent quarantine review, halt governance audit, or principal model verification.

ASK (Agent Security Framework) threat analyst — ASK 2026.04. Use this skill whenever the user wants to: analyze threats to AI agent systems; assess XPIA (cross-prompt injection attack) kill chain posture; evaluate attack surfaces; review defensive architecture against specific threat categories; understand traditional vs novel vs hybrid threats to agents; analyze MCP security risks; assess identity/memory poisoning risks; evaluate behavioral drift detection; review multi-agent cascade failure risks; or understand ASK framework limitations and known gaps. Trigger on any mention of agent threat model, XPIA analysis, prompt injection defense, agent attack surface, MCP security, identity poisoning, behavioral drift, cascade failures, agent threat assessment, kill chain analysis, or ASK limitations.