Agent Library

21,500+ skills & agents. Every one governed.

5,814 pre-built agents and 15,654 library skills across 24 industries and 12 roles per industry — installable from the catalog, connected to your systems, and run through the same fail-closed gate chain as everything else on Cortex.

21,511 governed library items · counted live from the catalog, not a marketing number

Agent Studio
skills
Search KBCreate ticketSend email add
Publishedv4 · reliability 96
Where is order #4471?
Shipped, arriving Thursday.tools: Search KB · $0.004
studio ▸ build → publish → chat-test
Collections

Start from a curated collection.

Hand-built suites for the jobs enterprises automate first — every collection ships governed, with policies and audit built in.

Wealth & Retirement · 121 skills
  • Retirement income & withdrawal strategy
  • Tax: Roth/RRSP, loss harvesting, rule changes
  • Estate, insurance & cross-border planning
  • Advisor tools: meeting prep, compliance pre-screen
Enterprise Role Packs · 11 roles
  • Service, Sales & Customer Success
  • IT Service Desk, HR & Finance Ops
  • Legal Intake, Procurement & Field Ops
  • Risk & Compliance
Productivity Pack · 9 agents
  • Inbox triage & email drafting
  • Meeting prep, notes & follow-up
  • Smart scheduling & daily brief
  • Executive assistant orchestration
Gene collection · 630 agents
  • Smart claims, actuarial & AML
  • Audit, GRC & ESG reporting
  • ITAM / ITSM & security operations
  • Data & analytics workbenches
Browse the library

Find the skill your team needs.

Search 21,500+ governed skills and agents, or filter by industry and type — every result installs from the catalog and runs through the same gates.

skill

Check supplied context against policy — Detection Engineer, Cybersecurity

Check supplied context against policy for Detection Engineer teams in Cybersecurity, delivered by the Compliance Checker pattern from supplied context. Splunk and CrowdStrike are possible integration contexts that must be configured separately. Runs governed by policy, budgets, and the audit ledger.

CybersecurityDetection EngineerCompliance Checker
skill

Surface potential policy issues — Detection Engineer, Cybersecurity

Surface potential policy issues for Detection Engineer teams in Cybersecurity, delivered by the Compliance Checker pattern from supplied context. Splunk and CrowdStrike are possible integration contexts that must be configured separately. Runs governed by policy, budgets, and the audit ledger.

CybersecurityDetection EngineerCompliance Checker
skill

Recommend review items — Detection Engineer, Cybersecurity

Recommend review items for Detection Engineer teams in Cybersecurity, delivered by the Compliance Checker pattern from supplied context. Splunk and CrowdStrike are possible integration contexts that must be configured separately. Runs governed by policy, budgets, and the audit ledger.

CybersecurityDetection EngineerCompliance Checker
skill

Assess supplied risk context — Detection Engineer, Cybersecurity

Assess supplied risk context for Detection Engineer teams in Cybersecurity, delivered by the Risk Assessment pattern from supplied context. Splunk and CrowdStrike are possible integration contexts that must be configured separately. Runs governed by policy, budgets, and the audit ledger.

CybersecurityDetection EngineerRisk Assessment
skill

Explain assessment drivers — Detection Engineer, Cybersecurity

Explain assessment drivers for Detection Engineer teams in Cybersecurity, delivered by the Risk Assessment pattern from supplied context. Splunk and CrowdStrike are possible integration contexts that must be configured separately. Runs governed by policy, budgets, and the audit ledger.

CybersecurityDetection EngineerRisk Assessment
skill

Recommend human review — Detection Engineer, Cybersecurity

Recommend human review for Detection Engineer teams in Cybersecurity, delivered by the Risk Assessment pattern from supplied context. Splunk and CrowdStrike are possible integration contexts that must be configured separately. Runs governed by policy, budgets, and the audit ledger.

CybersecurityDetection EngineerRisk Assessment
skill

Query supplied record data — Detection Engineer, Cybersecurity

Query supplied record data for Detection Engineer teams in Cybersecurity, delivered by the Reconciliation Brief pattern from supplied context. Splunk and CrowdStrike are possible integration contexts that must be configured separately. Runs governed by policy, budgets, and the audit ledger.

CybersecurityDetection EngineerReconciliation Brief
skill

Summarize potential discrepancies — Detection Engineer, Cybersecurity

Summarize potential discrepancies for Detection Engineer teams in Cybersecurity, delivered by the Reconciliation Brief pattern from supplied context. Splunk and CrowdStrike are possible integration contexts that must be configured separately. Runs governed by policy, budgets, and the audit ledger.

CybersecurityDetection EngineerReconciliation Brief
skill

Prepare a reconciliation brief — Detection Engineer, Cybersecurity

Prepare a reconciliation brief for Detection Engineer teams in Cybersecurity, delivered by the Reconciliation Brief pattern from supplied context. Splunk and CrowdStrike are possible integration contexts that must be configured separately. Runs governed by policy, budgets, and the audit ledger.

CybersecurityDetection EngineerReconciliation Brief
skill

Assess a supplied exception — Detection Engineer, Cybersecurity

Assess a supplied exception for Detection Engineer teams in Cybersecurity, delivered by the Exception Review pattern from supplied context. Splunk and CrowdStrike are possible integration contexts that must be configured separately. Runs governed by policy, budgets, and the audit ledger.

CybersecurityDetection EngineerException Review
skill

Summarize the assessment — Detection Engineer, Cybersecurity

Summarize the assessment for Detection Engineer teams in Cybersecurity, delivered by the Exception Review pattern from supplied context. Splunk and CrowdStrike are possible integration contexts that must be configured separately. Runs governed by policy, budgets, and the audit ledger.

CybersecurityDetection EngineerException Review
skill

Recommend follow-up review — Detection Engineer, Cybersecurity

Recommend follow-up review for Detection Engineer teams in Cybersecurity, delivered by the Exception Review pattern from supplied context. Splunk and CrowdStrike are possible integration contexts that must be configured separately. Runs governed by policy, budgets, and the audit ledger.

CybersecurityDetection EngineerException Review
skill

Run an on-demand read query — Detection Engineer, Cybersecurity

Run an on-demand read query for Detection Engineer teams in Cybersecurity, delivered by the On-demand Reporting & Insights pattern from supplied context. Splunk and CrowdStrike are possible integration contexts that must be configured separately. Runs governed by policy, budgets, and the audit ledger.

CybersecurityDetection EngineerOn-demand Reporting & Insights
skill

Summarize query results — Detection Engineer, Cybersecurity

Summarize query results for Detection Engineer teams in Cybersecurity, delivered by the On-demand Reporting & Insights pattern from supplied context. Splunk and CrowdStrike are possible integration contexts that must be configured separately. Runs governed by policy, budgets, and the audit ledger.

CybersecurityDetection EngineerOn-demand Reporting & Insights
skill

Highlight supplied exceptions — Detection Engineer, Cybersecurity

Highlight supplied exceptions for Detection Engineer teams in Cybersecurity, delivered by the On-demand Reporting & Insights pattern from supplied context. Splunk and CrowdStrike are possible integration contexts that must be configured separately. Runs governed by policy, budgets, and the audit ledger.

CybersecurityDetection EngineerOn-demand Reporting & Insights
skill

Assess supplied context — Detection Engineer, Cybersecurity

Assess supplied context for Detection Engineer teams in Cybersecurity, delivered by the Decision Support pattern from supplied context. Splunk and CrowdStrike are possible integration contexts that must be configured separately. Runs governed by policy, budgets, and the audit ledger.

CybersecurityDetection EngineerDecision Support
skill

Draft a recommended response — Detection Engineer, Cybersecurity

Draft a recommended response for Detection Engineer teams in Cybersecurity, delivered by the Decision Support pattern from supplied context. Splunk and CrowdStrike are possible integration contexts that must be configured separately. Runs governed by policy, budgets, and the audit ledger.

CybersecurityDetection EngineerDecision Support
skill

Prepare rationale for review — Detection Engineer, Cybersecurity

Prepare rationale for review for Detection Engineer teams in Cybersecurity, delivered by the Decision Support pattern from supplied context. Splunk and CrowdStrike are possible integration contexts that must be configured separately. Runs governed by policy, budgets, and the audit ledger.

CybersecurityDetection EngineerDecision Support
skill

Summarize supplied work — Detection Engineer, Cybersecurity

Summarize supplied work for Detection Engineer teams in Cybersecurity, delivered by the Routing Advisor pattern from supplied context. Splunk and CrowdStrike are possible integration contexts that must be configured separately. Runs governed by policy, budgets, and the audit ledger.

CybersecurityDetection EngineerRouting Advisor
skill

Assess priority and risk — Detection Engineer, Cybersecurity

Assess priority and risk for Detection Engineer teams in Cybersecurity, delivered by the Routing Advisor pattern from supplied context. Splunk and CrowdStrike are possible integration contexts that must be configured separately. Runs governed by policy, budgets, and the audit ledger.

CybersecurityDetection EngineerRouting Advisor
skill

Recommend a routing decision — Detection Engineer, Cybersecurity

Recommend a routing decision for Detection Engineer teams in Cybersecurity, delivered by the Routing Advisor pattern from supplied context. Splunk and CrowdStrike are possible integration contexts that must be configured separately. Runs governed by policy, budgets, and the audit ledger.

CybersecurityDetection EngineerRouting Advisor
skill

Query supplied historical data — Detection Engineer, Cybersecurity

Query supplied historical data for Detection Engineer teams in Cybersecurity, delivered by the Trend Briefing pattern from supplied context. Splunk and CrowdStrike are possible integration contexts that must be configured separately. Runs governed by policy, budgets, and the audit ledger.

CybersecurityDetection EngineerTrend Briefing
skill

Summarize observed trends — Detection Engineer, Cybersecurity

Summarize observed trends for Detection Engineer teams in Cybersecurity, delivered by the Trend Briefing pattern from supplied context. Splunk and CrowdStrike are possible integration contexts that must be configured separately. Runs governed by policy, budgets, and the audit ledger.

CybersecurityDetection EngineerTrend Briefing
skill

Prepare questions for forecast review — Detection Engineer, Cybersecurity

Prepare questions for forecast review for Detection Engineer teams in Cybersecurity, delivered by the Trend Briefing pattern from supplied context. Splunk and CrowdStrike are possible integration contexts that must be configured separately. Runs governed by policy, budgets, and the audit ledger.

CybersecurityDetection EngineerTrend Briefing
Governed by default

Install is the easy part. Governance comes with it.

Library agents aren't scripts — they're governed identities. Installing one registers it with an owner, a budget, allowed models and actions, and a place in the audit ledger.

1 · Pick

Choose from the catalog

Filter by your industry and role; every item lists the systems it connects to and the skills it invokes.

2 · Connect

Wire it to your stack

Connectors, MCP servers, and OpenAPI imports — scoped by allowlists and DLP at the gateway.

3 · Run governed

Every run through the gates

Identity, budget, guardrails, policy, oversight — then a signed receipt in the Trust Ledger. On every plan.

Don't see the skill you need?

The visual skill builder ships new skills without code — or tell us what's missing and we'll point you at the closest governed pattern.

Agent Library — 21,500+ skills & agents | Cortex AI OS