- Retirement income & withdrawal strategy
- Tax: Roth/RRSP, loss harvesting, rule changes
- Estate, insurance & cross-border planning
- Advisor tools: meeting prep, compliance pre-screen
21,500+ skills & agents. Every one governed.
5,814 pre-built agents and 15,654 library skills across 24 industries and 12 roles per industry — installable from the catalog, connected to your systems, and run through the same fail-closed gate chain as everything else on Cortex.
21,511 governed library items · counted live from the catalog, not a marketing number
Start from a curated collection.
Hand-built suites for the jobs enterprises automate first — every collection ships governed, with policies and audit built in.
- Service, Sales & Customer Success
- IT Service Desk, HR & Finance Ops
- Legal Intake, Procurement & Field Ops
- Risk & Compliance
- Inbox triage & email drafting
- Meeting prep, notes & follow-up
- Smart scheduling & daily brief
- Executive assistant orchestration
- Smart claims, actuarial & AML
- Audit, GRC & ESG reporting
- ITAM / ITSM & security operations
- Data & analytics workbenches
Find the skill your team needs.
Search 21,500+ governed skills and agents, or filter by industry and type — every result installs from the catalog and runs through the same gates.
864 results · Cybersecurity
Search approved onboarding knowledge — Identity & Access Analyst, Cybersecurity
Search approved onboarding knowledge for Identity & Access Analyst teams in Cybersecurity, delivered by the Onboarding Guide pattern from supplied context. Splunk and CrowdStrike are possible integration contexts that must be configured separately. Runs governed by policy, budgets, and the audit ledger.
Draft step-by-step guidance — Identity & Access Analyst, Cybersecurity
Draft step-by-step guidance for Identity & Access Analyst teams in Cybersecurity, delivered by the Onboarding Guide pattern from supplied context. Splunk and CrowdStrike are possible integration contexts that must be configured separately. Runs governed by policy, budgets, and the audit ledger.
Prepare a review checklist — Identity & Access Analyst, Cybersecurity
Prepare a review checklist for Identity & Access Analyst teams in Cybersecurity, delivered by the Onboarding Guide pattern from supplied context. Splunk and CrowdStrike are possible integration contexts that must be configured separately. Runs governed by policy, budgets, and the audit ledger.
Summarize supplied feedback — Identity & Access Analyst, Cybersecurity
Summarize supplied feedback for Identity & Access Analyst teams in Cybersecurity, delivered by the Feedback Summary pattern from supplied context. Splunk and CrowdStrike are possible integration contexts that must be configured separately. Runs governed by policy, budgets, and the audit ledger.
Surface recurring points — Identity & Access Analyst, Cybersecurity
Surface recurring points for Identity & Access Analyst teams in Cybersecurity, delivered by the Feedback Summary pattern from supplied context. Splunk and CrowdStrike are possible integration contexts that must be configured separately. Runs governed by policy, budgets, and the audit ledger.
Prepare follow-up questions — Identity & Access Analyst, Cybersecurity
Prepare follow-up questions for Identity & Access Analyst teams in Cybersecurity, delivered by the Feedback Summary pattern from supplied context. Splunk and CrowdStrike are possible integration contexts that must be configured separately. Runs governed by policy, budgets, and the audit ledger.
Search approved knowledge — Identity & Access Analyst, Cybersecurity
Search approved knowledge for Identity & Access Analyst teams in Cybersecurity, delivered by the Research & Discovery pattern from supplied context. Splunk and CrowdStrike are possible integration contexts that must be configured separately. Runs governed by policy, budgets, and the audit ledger.
Summarize supplied findings — Identity & Access Analyst, Cybersecurity
Summarize supplied findings for Identity & Access Analyst teams in Cybersecurity, delivered by the Research & Discovery pattern from supplied context. Splunk and CrowdStrike are possible integration contexts that must be configured separately. Runs governed by policy, budgets, and the audit ledger.
Draft a research brief — Identity & Access Analyst, Cybersecurity
Draft a research brief for Identity & Access Analyst teams in Cybersecurity, delivered by the Research & Discovery pattern from supplied context. Splunk and CrowdStrike are possible integration contexts that must be configured separately. Runs governed by policy, budgets, and the audit ledger.
Search approved process knowledge — Identity & Access Analyst, Cybersecurity
Search approved process knowledge for Identity & Access Analyst teams in Cybersecurity, delivered by the Process Guidance pattern from supplied context. Splunk and CrowdStrike are possible integration contexts that must be configured separately. Runs governed by policy, budgets, and the audit ledger.
Summarize supplied process context — Identity & Access Analyst, Cybersecurity
Summarize supplied process context for Identity & Access Analyst teams in Cybersecurity, delivered by the Process Guidance pattern from supplied context. Splunk and CrowdStrike are possible integration contexts that must be configured separately. Runs governed by policy, budgets, and the audit ledger.
Draft next-step guidance — Identity & Access Analyst, Cybersecurity
Draft next-step guidance for Identity & Access Analyst teams in Cybersecurity, delivered by the Process Guidance pattern from supplied context. Splunk and CrowdStrike are possible integration contexts that must be configured separately. Runs governed by policy, budgets, and the audit ledger.
Summarize supplied request context — Security Engineer, Cybersecurity
Summarize supplied request context for Security Engineer teams in Cybersecurity, delivered by the Intake Review & Triage pattern from supplied context. Splunk and CrowdStrike are possible integration contexts that must be configured separately. Runs governed by policy, budgets, and the audit ledger.
Assess urgency and risk — Security Engineer, Cybersecurity
Assess urgency and risk for Security Engineer teams in Cybersecurity, delivered by the Intake Review & Triage pattern from supplied context. Splunk and CrowdStrike are possible integration contexts that must be configured separately. Runs governed by policy, budgets, and the audit ledger.
Recommend a review priority — Security Engineer, Cybersecurity
Recommend a review priority for Security Engineer teams in Cybersecurity, delivered by the Intake Review & Triage pattern from supplied context. Splunk and CrowdStrike are possible integration contexts that must be configured separately. Runs governed by policy, budgets, and the audit ledger.
Condense supplied content — Security Engineer, Cybersecurity
Condense supplied content for Security Engineer teams in Cybersecurity, delivered by the Document Summarizer pattern from supplied context. Splunk and CrowdStrike are possible integration contexts that must be configured separately. Runs governed by policy, budgets, and the audit ledger.
Surface key points — Security Engineer, Cybersecurity
Surface key points for Security Engineer teams in Cybersecurity, delivered by the Document Summarizer pattern from supplied context. Splunk and CrowdStrike are possible integration contexts that must be configured separately. Runs governed by policy, budgets, and the audit ledger.
Produce a concise brief — Security Engineer, Cybersecurity
Produce a concise brief for Security Engineer teams in Cybersecurity, delivered by the Document Summarizer pattern from supplied context. Splunk and CrowdStrike are possible integration contexts that must be configured separately. Runs governed by policy, budgets, and the audit ledger.
Search approved knowledge — Security Engineer, Cybersecurity
Search approved knowledge for Security Engineer teams in Cybersecurity, delivered by the Q&A Assistant pattern from supplied context. Splunk and CrowdStrike are possible integration contexts that must be configured separately. Runs governed by policy, budgets, and the audit ledger.
Draft a grounded response — Security Engineer, Cybersecurity
Draft a grounded response for Security Engineer teams in Cybersecurity, delivered by the Q&A Assistant pattern from supplied context. Splunk and CrowdStrike are possible integration contexts that must be configured separately. Runs governed by policy, budgets, and the audit ledger.
Prepare a review-ready answer — Security Engineer, Cybersecurity
Prepare a review-ready answer for Security Engineer teams in Cybersecurity, delivered by the Q&A Assistant pattern from supplied context. Splunk and CrowdStrike are possible integration contexts that must be configured separately. Runs governed by policy, budgets, and the audit ledger.
Draft from supplied context — Security Engineer, Cybersecurity
Draft from supplied context for Security Engineer teams in Cybersecurity, delivered by the Drafting & Generation pattern from supplied context. Splunk and CrowdStrike are possible integration contexts that must be configured separately. Runs governed by policy, budgets, and the audit ledger.
Follow configured behavior guidance — Security Engineer, Cybersecurity
Follow configured behavior guidance for Security Engineer teams in Cybersecurity, delivered by the Drafting & Generation pattern from supplied context. Splunk and CrowdStrike are possible integration contexts that must be configured separately. Runs governed by policy, budgets, and the audit ledger.
Prepare copy for revision — Security Engineer, Cybersecurity
Prepare copy for revision for Security Engineer teams in Cybersecurity, delivered by the Drafting & Generation pattern from supplied context. Splunk and CrowdStrike are possible integration contexts that must be configured separately. Runs governed by policy, budgets, and the audit ledger.
Install is the easy part. Governance comes with it.
Library agents aren't scripts — they're governed identities. Installing one registers it with an owner, a budget, allowed models and actions, and a place in the audit ledger.
Choose from the catalog
Filter by your industry and role; every item lists the systems it connects to and the skills it invokes.
Wire it to your stack
Connectors, MCP servers, and OpenAPI imports — scoped by allowlists and DLP at the gateway.
Every run through the gates
Identity, budget, guardrails, policy, oversight — then a signed receipt in the Trust Ledger. On every plan.
Don't see the skill you need?
The visual skill builder ships new skills without code — or tell us what's missing and we'll point you at the closest governed pattern.