Security review and threat work — threat modeling, vulnerability assessment, penetration test, incident response, OWASP Top 10, LLM Top 10, API Top 10, CVE triage, STRIDE, NIST CSF, SBOM. Auto-loops on any task touching PII, auth, payments or regulated data.
中文简介正在准备中。当前显示原文说明。
查看安装方法安装前可以查看交给 AI 代理的指令内容。
Office: CSO | Lead: security-analyst Sub-skills: 8 | Frameworks: OWASP Top 10, NIST CSF, Zero Trust, STRIDE, DREAD
The CSO auto-loop domain -- activates automatically on any task containing security, compliance, PII, or regulated industry signals. This skill provides security analysis, threat modeling, penetration testing, incident response, vulnerability scanning, and security architecture design. Unlike raw external security tools, Maxim applies behavioral science to security culture, proactively routes to the right specialist agent, and tags every output with confidence and risk signals.
| Task Signal | Routes To | SKILL.md Path |
|---|---|---|
| regulatory compliance, audit prep, policy enforcement | compliance-officer | compliance-officer/SKILL.md |
| ethical hacking, bug bounty, vulnerability exploitation | ethical-hacker | ethical-hacker/SKILL.md |
| incident management, containment, post-incident review | incident-responder | incident-responder/SKILL.md |
| penetration testing, offensive security, vulnerability testing | penetration-tester | penetration-tester/SKILL.md |
| secure system design, zero trust architecture, encryption design | security-architect | security-architect/SKILL.md |
| security audit, risk assessment, controls validation | security-auditor | security-auditor/SKILL.md |
| threat analysis, threat intelligence, attack pattern mapping | threat-analyst | threat-analyst/SKILL.md |
| vulnerability scan, CVE monitoring, dependency check | vulnerability-scanner | vulnerability-scanner/SKILL.md |
This domain activates when:
/mxm-security or /mxm-csoethics_required: true on penetration-tester and ai-ethics-reviewer -- engagement authorization required before offensive testing; AI outputs require ethics review before deploymentCopyright (c) 2026 iSystematic Inc. Maxim product. BSL 1.1.
还没有评价。欢迎分享你的使用感受。
无需登录即可发表。欢迎分享使用感受、提问，或说明在哪些环境下无法运行。
还没有评论。来写第一条吧。
AI video and image prompt engineering — video generation, image generation, product video, social media video, cinematic direction, animation, Seedance, Higgsfield, GPT-Image-2. Applies 15 Maxim-authored cinematic styles and the atomic prompt schema.
中文简介正在准备中。当前显示原文说明。
Apply a named behavioral science framework to any task — persuasion, nudge design, habit formation, conversion, influence, negotiation, cognitive bias, choice architecture, decision framing. The framework backbone every other Maxim skill loops into for psychological validation.
中文简介正在准备中。当前显示原文说明。
Founder and CEO automation — morning standup, overnight cycle, burn rate, runway, pipeline review, investor and fundraising prep, executive summary, daily digest. Operates on the .mxm-executive-summary context.
中文简介正在准备中。当前显示原文说明。
Tear down a company on request — "do a teardown of", "break down this company", "analyze this competitor's business". Fixed-template output: business model, how they make money, positioning, and where they are exposed.
中文简介正在准备中。当前显示原文说明。
Track what a competitor actually shipped — "watch this competitor", "track what they ship", "what changed at". Compares against the last snapshot and reports only real moves: launches, pricing changes, positioning shifts.
中文简介正在准备中。当前显示原文说明。
Regulatory review across 14 frameworks — compliance review, privacy impact assessment, regulatory gap analysis, data subject rights, consent mechanisms, audit trail, AI ethics review, data flow mapping. Covers GDPR, PIPEDA, HIPAA, PCI-DSS, SOC2, UAE-PDPL, EU AI Act and more.
中文简介正在准备中。当前显示原文说明。