{ "schema": "aiblocks-page/1", "id": "agency-security-senior-secops", "type": "agent", "name": "Security operations engineer", "summary": "Paste code. Get a scan for hardcoded secrets, bad JWT checks and SQL injection, then a review against your login, CORS and logging rules.", "headline": "Security operations engineer", "subhead": "Paste a code change, a file, or a PR diff. It scans it first for hardcoded secrets and bad defaults, then checks logins, tokens, CORS, rate limits and logs against the rules in this profile.", "job": { "id": "secure-code", "name": "Keep your code secure" }, "level": "intermediate", "thinking": "high", "tested": true, "updated": "2026-11-03", "first_published": "2026-10-26", "inputs": [ { "type": "question", "required": true, "label": "Question", "what": "the problem, decision or piece of work you want help with, and what a good outcome looks like" }, { "type": "codebase", "required": false, "label": "Codebase", "what": "a project's code, in a folder or repo the AI can open" } ], "outputs": [ { "type": "security_report", "required": true, "label": "Security report", "what": "the risks found in the code, ranked, each with a fix" } ], "you_give": [ "The code to review: a file, a diff, or a pull request's changed lines, pasted or attached.", "What mode you want: review existing code, implement a control, or check a specific phase against a checklist.", "Your own security standard or rules, if you have one that differs from the defaults listed here (optional)." ], "you_get": [ "A security scan result, run first, every time code is given: findings by severity (Critical, High) with the line and the rule it breaks.", "A fuller review against the standard: authentication, tokens, cookies, CORS, rate limiting, input validation and logging.", "For implement mode, code that follows the standard, not just a description of what it should do.", "For checklist mode, a pass or fail per item for the phase you named." ], "use_when": [ "You're about to merge a pull request and want it scanned for hardcoded secrets and injection risks before it ships.", "You're building a login, token or session feature and want it built to a defined standard the first time.", "You inherited a codebase and want a first-pass security scan of the files that handle auth, tokens or user input.", "You want a checklist to confirm a security-relevant phase (adding auth, adding an API) is actually done, not just \"looks done.\"" ], "skip_when": [ "You want a cloud account or network architecture reviewed, not application code. Use the Cloud security designer.", "You need a full application security program with CI gates and dependency scanning set up. Use the Application security reviewer.", "You have an active incident, not a pre-merge review. Use the Security incident responder." ], "output_sample": { "input": [ "The code, diff or pull request to check", "The mode: review, implement or checklist", "Your own security standard, if different from the defaults (optional)" ], "prerequisites": [ "None beyond pasting the code; no code execution is needed" ], "output": [ { "name": "Security scan", "contains": "Hardcoded secrets, insecure fallbacks, bad JWT handling and SQL injection findings, with line numbers and the rule broken." }, { "name": "Review findings", "contains": "Each issue against the auth, token, CORS, rate-limiting and logging rules, with its fix." }, { "name": "Checklist result", "contains": "A pass or fail for each item in the named build phase, with the reason." }, { "name": "Assumptions and checks", "contains": "What the agent assumed and which facts you still need to confirm." } ] }, "output_shape": "SECURITY SCAN\n [Critical/High] on line → Rule \n\nREVIEW FINDINGS (if mode is review or implement)\n [severity] | | \n\nCHECKLIST RESULT (if mode is checklist)\n | Pass or Fail | \n\nASSUMPTIONS AND CHECKS STILL NEEDED\n | ", "how_to_use": [ "Download the pack from this page and add it to your AI as a skill, or paste SKILL.md then references/source-agent.md into a new chat.", "Paste the code, diff or PR you want checked.", "Say which mode you want: review this, implement this control, or check this phase against the checklist.", "Read the automatic scan result first. Fix any Critical finding (hardcoded secret, SQL injection, JWT with no algorithm check) before anything else.", "Then work through the fuller review findings in severity order.", "If your team has its own standard that differs from the defaults, say so and it will check against yours instead." ], "checks": [ "The result addresses your actual task and cites the evidence used.", "Examples, role-play experience and targets are kept separate from verified results.", "Claims of tests, memory, tool access or completed actions match what actually happened." ], "next": [ { "name": "Prompt injection defender", "url": "https://useaiblocks.com/skills/prompt-injection-defender", "why": "Prompt injection defender" }, { "name": "AI agent attack tester", "url": "https://useaiblocks.com/skills/ai-agent-attack-tester", "why": "AI agent attack tester" } ], "source": { "by": "Michael Sitarzewski and Agency Agents contributors", "repo": "msitarzewski/agency-agents", "url": "https://github.com/msitarzewski/agency-agents/blob/b37b5bb33b78f2c1d6567d98e25ca818e3259219/security/security-senior-secops.md", "licence": "MIT", "original_name": "Senior SecOps Engineer", "commit": "b37b5bb33b78f2c1d6567d98e25ca818e3259219" }, "credits": [ { "title": "Senior SecOps Engineer", "by": "Michael Sitarzewski and Agency Agents contributors", "url": "https://github.com/msitarzewski/agency-agents/blob/b37b5bb33b78f2c1d6567d98e25ca818e3259219/security/security-senior-secops.md", "used": "Original agent profile, preserved in references/source-agent.md; AI Blocks adds setup and review instructions." } ], "files": [ "LICENSE", "references/source-agent.md", "SETUP.md", "source.json" ], "links": { "page": "https://useaiblocks.com/agents/agency-security-senior-secops", "markdown": "https://useaiblocks.com/agents/agency-security-senior-secops.md", "json": "https://useaiblocks.com/agents/agency-security-senior-secops.json", "instructions": "https://useaiblocks.com/skills/agency-security-senior-secops/SKILL.md", "download": "https://useaiblocks.com/skills/agency-security-senior-secops.zip", "api_item": "https://useaiblocks.com/api/v1/items/agency-security-senior-secops", "api_document": "https://useaiblocks.com/api/v1/documents/agent/agency-security-senior-secops", "mcp": "https://useaiblocks.com/mcp" } }