Agent Library

21,500+ skills & agents. Every one governed.

5,814 pre-built agents and 15,654 library skills across 24 industries and 12 roles per industry — installable from the catalog, connected to your systems, and run through the same fail-closed gate chain as everything else on Cortex.

21,511 governed library items · counted live from the catalog, not a marketing number

Agent Studio
skills
Search KBCreate ticketSend email add
Publishedv4 · reliability 96
Where is order #4471?
Shipped, arriving Thursday.tools: Search KB · $0.004
studio ▸ build → publish → chat-test
Collections

Start from a curated collection.

Hand-built suites for the jobs enterprises automate first — every collection ships governed, with policies and audit built in.

Wealth & Retirement · 121 skills
  • Retirement income & withdrawal strategy
  • Tax: Roth/RRSP, loss harvesting, rule changes
  • Estate, insurance & cross-border planning
  • Advisor tools: meeting prep, compliance pre-screen
Enterprise Role Packs · 11 roles
  • Service, Sales & Customer Success
  • IT Service Desk, HR & Finance Ops
  • Legal Intake, Procurement & Field Ops
  • Risk & Compliance
Productivity Pack · 9 agents
  • Inbox triage & email drafting
  • Meeting prep, notes & follow-up
  • Smart scheduling & daily brief
  • Executive assistant orchestration
Gene collection · 630 agents
  • Smart claims, actuarial & AML
  • Audit, GRC & ESG reporting
  • ITAM / ITSM & security operations
  • Data & analytics workbenches
Browse the library

Find the skill your team needs.

Search 21,500+ governed skills and agents, or filter by industry and type — every result installs from the catalog and runs through the same gates.

skill

Search approved knowledge — GRC Analyst, Cybersecurity

Search approved knowledge for GRC Analyst teams in Cybersecurity, delivered by the Research & Discovery pattern from supplied context. Splunk and CrowdStrike are possible integration contexts that must be configured separately. Runs governed by policy, budgets, and the audit ledger.

CybersecurityGRC AnalystResearch & Discovery
skill

Summarize supplied findings — GRC Analyst, Cybersecurity

Summarize supplied findings for GRC Analyst teams in Cybersecurity, delivered by the Research & Discovery pattern from supplied context. Splunk and CrowdStrike are possible integration contexts that must be configured separately. Runs governed by policy, budgets, and the audit ledger.

CybersecurityGRC AnalystResearch & Discovery
skill

Draft a research brief — GRC Analyst, Cybersecurity

Draft a research brief for GRC Analyst teams in Cybersecurity, delivered by the Research & Discovery pattern from supplied context. Splunk and CrowdStrike are possible integration contexts that must be configured separately. Runs governed by policy, budgets, and the audit ledger.

CybersecurityGRC AnalystResearch & Discovery
skill

Search approved process knowledge — GRC Analyst, Cybersecurity

Search approved process knowledge for GRC Analyst teams in Cybersecurity, delivered by the Process Guidance pattern from supplied context. Splunk and CrowdStrike are possible integration contexts that must be configured separately. Runs governed by policy, budgets, and the audit ledger.

CybersecurityGRC AnalystProcess Guidance
skill

Summarize supplied process context — GRC Analyst, Cybersecurity

Summarize supplied process context for GRC Analyst teams in Cybersecurity, delivered by the Process Guidance pattern from supplied context. Splunk and CrowdStrike are possible integration contexts that must be configured separately. Runs governed by policy, budgets, and the audit ledger.

CybersecurityGRC AnalystProcess Guidance
skill

Draft next-step guidance — GRC Analyst, Cybersecurity

Draft next-step guidance for GRC Analyst teams in Cybersecurity, delivered by the Process Guidance pattern from supplied context. Splunk and CrowdStrike are possible integration contexts that must be configured separately. Runs governed by policy, budgets, and the audit ledger.

CybersecurityGRC AnalystProcess Guidance
skill

Summarize supplied request context — Identity & Access Analyst, Cybersecurity

Summarize supplied request context for Identity & Access Analyst teams in Cybersecurity, delivered by the Intake Review & Triage pattern from supplied context. Splunk and CrowdStrike are possible integration contexts that must be configured separately. Runs governed by policy, budgets, and the audit ledger.

CybersecurityIdentity & Access AnalystIntake Review & Triage
skill

Assess urgency and risk — Identity & Access Analyst, Cybersecurity

Assess urgency and risk for Identity & Access Analyst teams in Cybersecurity, delivered by the Intake Review & Triage pattern from supplied context. Splunk and CrowdStrike are possible integration contexts that must be configured separately. Runs governed by policy, budgets, and the audit ledger.

CybersecurityIdentity & Access AnalystIntake Review & Triage
skill

Recommend a review priority — Identity & Access Analyst, Cybersecurity

Recommend a review priority for Identity & Access Analyst teams in Cybersecurity, delivered by the Intake Review & Triage pattern from supplied context. Splunk and CrowdStrike are possible integration contexts that must be configured separately. Runs governed by policy, budgets, and the audit ledger.

CybersecurityIdentity & Access AnalystIntake Review & Triage
skill

Condense supplied content — Identity & Access Analyst, Cybersecurity

Condense supplied content for Identity & Access Analyst teams in Cybersecurity, delivered by the Document Summarizer pattern from supplied context. Splunk and CrowdStrike are possible integration contexts that must be configured separately. Runs governed by policy, budgets, and the audit ledger.

CybersecurityIdentity & Access AnalystDocument Summarizer
skill

Surface key points — Identity & Access Analyst, Cybersecurity

Surface key points for Identity & Access Analyst teams in Cybersecurity, delivered by the Document Summarizer pattern from supplied context. Splunk and CrowdStrike are possible integration contexts that must be configured separately. Runs governed by policy, budgets, and the audit ledger.

CybersecurityIdentity & Access AnalystDocument Summarizer
skill

Produce a concise brief — Identity & Access Analyst, Cybersecurity

Produce a concise brief for Identity & Access Analyst teams in Cybersecurity, delivered by the Document Summarizer pattern from supplied context. Splunk and CrowdStrike are possible integration contexts that must be configured separately. Runs governed by policy, budgets, and the audit ledger.

CybersecurityIdentity & Access AnalystDocument Summarizer
skill

Search approved knowledge — Identity & Access Analyst, Cybersecurity

Search approved knowledge for Identity & Access Analyst teams in Cybersecurity, delivered by the Q&A Assistant pattern from supplied context. Splunk and CrowdStrike are possible integration contexts that must be configured separately. Runs governed by policy, budgets, and the audit ledger.

CybersecurityIdentity & Access AnalystQ&A Assistant
skill

Draft a grounded response — Identity & Access Analyst, Cybersecurity

Draft a grounded response for Identity & Access Analyst teams in Cybersecurity, delivered by the Q&A Assistant pattern from supplied context. Splunk and CrowdStrike are possible integration contexts that must be configured separately. Runs governed by policy, budgets, and the audit ledger.

CybersecurityIdentity & Access AnalystQ&A Assistant
skill

Prepare a review-ready answer — Identity & Access Analyst, Cybersecurity

Prepare a review-ready answer for Identity & Access Analyst teams in Cybersecurity, delivered by the Q&A Assistant pattern from supplied context. Splunk and CrowdStrike are possible integration contexts that must be configured separately. Runs governed by policy, budgets, and the audit ledger.

CybersecurityIdentity & Access AnalystQ&A Assistant
skill

Draft from supplied context — Identity & Access Analyst, Cybersecurity

Draft from supplied context for Identity & Access Analyst teams in Cybersecurity, delivered by the Drafting & Generation pattern from supplied context. Splunk and CrowdStrike are possible integration contexts that must be configured separately. Runs governed by policy, budgets, and the audit ledger.

CybersecurityIdentity & Access AnalystDrafting & Generation
skill

Follow configured behavior guidance — Identity & Access Analyst, Cybersecurity

Follow configured behavior guidance for Identity & Access Analyst teams in Cybersecurity, delivered by the Drafting & Generation pattern from supplied context. Splunk and CrowdStrike are possible integration contexts that must be configured separately. Runs governed by policy, budgets, and the audit ledger.

CybersecurityIdentity & Access AnalystDrafting & Generation
skill

Prepare copy for revision — Identity & Access Analyst, Cybersecurity

Prepare copy for revision for Identity & Access Analyst teams in Cybersecurity, delivered by the Drafting & Generation pattern from supplied context. Splunk and CrowdStrike are possible integration contexts that must be configured separately. Runs governed by policy, budgets, and the audit ledger.

CybersecurityIdentity & Access AnalystDrafting & Generation
skill

Summarize a supplied record — Identity & Access Analyst, Cybersecurity

Summarize a supplied record for Identity & Access Analyst teams in Cybersecurity, delivered by the Record Review pattern from supplied context. Splunk and CrowdStrike are possible integration contexts that must be configured separately. Runs governed by policy, budgets, and the audit ledger.

CybersecurityIdentity & Access AnalystRecord Review
skill

Assess possible risk — Identity & Access Analyst, Cybersecurity

Assess possible risk for Identity & Access Analyst teams in Cybersecurity, delivered by the Record Review pattern from supplied context. Splunk and CrowdStrike are possible integration contexts that must be configured separately. Runs governed by policy, budgets, and the audit ledger.

CybersecurityIdentity & Access AnalystRecord Review
skill

Flag items for human review — Identity & Access Analyst, Cybersecurity

Flag items for human review for Identity & Access Analyst teams in Cybersecurity, delivered by the Record Review pattern from supplied context. Splunk and CrowdStrike are possible integration contexts that must be configured separately. Runs governed by policy, budgets, and the audit ledger.

CybersecurityIdentity & Access AnalystRecord Review
skill

Run a parameterized read query — Identity & Access Analyst, Cybersecurity

Run a parameterized read query for Identity & Access Analyst teams in Cybersecurity, delivered by the Data Query & Summary pattern from supplied context. Splunk and CrowdStrike are possible integration contexts that must be configured separately. Runs governed by policy, budgets, and the audit ledger.

CybersecurityIdentity & Access AnalystData Query & Summary
skill

Summarize returned records — Identity & Access Analyst, Cybersecurity

Summarize returned records for Identity & Access Analyst teams in Cybersecurity, delivered by the Data Query & Summary pattern from supplied context. Splunk and CrowdStrike are possible integration contexts that must be configured separately. Runs governed by policy, budgets, and the audit ledger.

CybersecurityIdentity & Access AnalystData Query & Summary
skill

Prepare a result-set overview — Identity & Access Analyst, Cybersecurity

Prepare a result-set overview for Identity & Access Analyst teams in Cybersecurity, delivered by the Data Query & Summary pattern from supplied context. Splunk and CrowdStrike are possible integration contexts that must be configured separately. Runs governed by policy, budgets, and the audit ledger.

CybersecurityIdentity & Access AnalystData Query & Summary
Governed by default

Install is the easy part. Governance comes with it.

Library agents aren't scripts — they're governed identities. Installing one registers it with an owner, a budget, allowed models and actions, and a place in the audit ledger.

1 · Pick

Choose from the catalog

Filter by your industry and role; every item lists the systems it connects to and the skills it invokes.

2 · Connect

Wire it to your stack

Connectors, MCP servers, and OpenAPI imports — scoped by allowlists and DLP at the gateway.

3 · Run governed

Every run through the gates

Identity, budget, guardrails, policy, oversight — then a signed receipt in the Trust Ledger. On every plan.

Don't see the skill you need?

The visual skill builder ships new skills without code — or tell us what's missing and we'll point you at the closest governed pattern.

Agent Library — 21,500+ skills & agents | Cortex AI OS