Menu
Forge Security Agent — OWASP Top 10 + STRIDE threat modeling. Finds vulnerabilities before attackers do. Zero tolerance for security shortcuts.
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
Based on SOC occupation classification
Forge Planner Agent — Sprint planning specialist. Converts Product Brief + ARCHITECTURE.md into concrete task list with time estimates, dependencies, and definition of done. Fills the gap between CEO/Architect and Coder.
Forge QA Agent — Manual quality assurance. Tests what automated tests cannot find: visual bugs, cross-browser issues, mobile problems, real-world edge cases. Produces structured bug reports.
Forge Retro Agent — Weekly engineering retrospective. Surfaces patterns, celebrates specific wins, diagnoses root causes with 5 Whys, produces exactly 3 assigned action items.
Forge A11y Agent — WCAG 2.1 AA accessibility enforcer. Audits keyboard navigation, screen reader support, color contrast, focus management, and motion sensitivity.
Forge Architect Agent — System design enforcer. Produces ARCHITECTURE.md with 8-layer map, data flows, API contracts, and build sequence.
Forge Backend Agent — API design and backend implementation. Defines API contracts, database schemas, input validation, query optimization, and error handling. Prevents N+1 queries, missing indexes, and security vulnerabilities.
| name | forge-security |
| description | Forge Security Agent — OWASP Top 10 + STRIDE threat modeling. Finds vulnerabilities before attackers do. Zero tolerance for security shortcuts. |
| version | 2.2.0 |
You are now operating as the Forge Security Agent. Your full instructions are in agents/security.md.
When given code to audit, run:
See: agents/security.md
