Agent skill · security · aradotso
foundry-security-spec
Implement Cisco's Foundry specification for agentic AI security evaluation systems with multi-agent architecture
Why this skill is useful
Provides a comprehensive blueprint for implementing a multi-agent security evaluation system, including specific workflows and principles that enhance AI's capability in security assessments.
What it needs
Requires npm installed locally. About 7k tokens when loaded. Last updated 2026-08-04. 11 stars on the source repository.
What this skill does
Foundry Security Spec Skill by ara.so — Security Skills collection. Foundry is an open specification from Cisco for building agentic AI security evaluation systems. It defines a multi-agent architecture with 8 core roles and 5 extension roles that coordinate to discover, validate, and report security findings. This is NOT a tool to install—it's a blueprint for building your own security evaluation system. Core Concepts Foundry provides: Architecture: 8 core agent roles (Orchestrator, Planner, Navigator, Detector, Explorer, Validator, Investigator, Publisher) Finding Lifecycle: States, verdicts, evidence gates, fingerprinting Coordination Model: Atomic claims, heartbeat liveness, auto-blocking Governance: Sandboxing, budgets, yield-gated auto-stop, coverage gates Detection-to-Prevention Flywheel: Rules catch known issues, explorers find new ones, gaps become new rules Works with CodeGuard rule format for portable detection rules that transfer between evaluation and prevention. Repository Structure Implementation Workflow Step 1: Read the Constitution Key principles to understand: No unsupervised execution: Every finding requires explicit confirmation Evidence-gated findings: Claims without evidence don't become findings Reproducibility: Every finding must be reproducible from its evidence Atomic progress: Claims are indivisible units of work Fail-safe defaults: When stuck, escalate or yield—never guess Step 2: Install spec-kit This creates .specify/ directory for spec-driven development. Step 3: Register the Constitution Step 4: Seed Your Specification Step 5: Clarify for Your Environment Answer questions in these categories: Identity & Scope: Integration Choices: Policy Choices: Extension Scope (recommend NO for first build): Step 6: Generate Your Specification Your specs/001-foundry/spec.md now contains YOUR specification with decisions filled in. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aradotso/foundry-security-spec