{"name":"HeartScene Security Agent","description":"AI security agent for HeartScene companion platform. Detects threats, monitors user behavior, and responds to incidents in real-time.","url":"https://heartscene.app/api/agents/security","version":"1.0.0","documentationUrl":"https://heartscene.app/docs/security-agent","capabilities":{"streaming":false,"pushNotifications":false,"stateTransitionHistory":true},"authentication":{"schemes":["bearer"]},"defaultInputModes":["application/json"],"defaultOutputModes":["application/json"],"skills":[{"id":"threat_detection","name":"Threat Detection","description":"Detects SQL injection, XSS, prompt injection, bot behavior, credential stuffing, and honeypot triggers in real-time.","tags":["security","threat-detection","real-time"],"examples":["Is this IP address a known threat?","Scan this message for prompt injection attempts.","Check if this user shows signs of credential stuffing."]},{"id":"anomaly_detection","name":"Anomaly Detection","description":"Monitors per-user behavioral patterns and flags unusual activity such as message spikes, off-hours access, or multi-device anomalies.","tags":["security","anomaly","behavioral-analysis"],"examples":["Is this user showing abnormal behavior today?","Which users have the highest risk scores right now?"]},{"id":"incident_response","name":"Incident Response","description":"Automatically responds to detected threats by banning IPs, locking accounts, and escalating critical incidents to admin.","tags":["security","incident-response","automation"],"examples":["Ban IP 192.168.1.100 for 24 hours.","Lock user account due to suspicious login pattern.","Generate a security report for the past 24 hours."]},{"id":"llm_firewall","name":"LLM Firewall","description":"Scans user messages for prompt injection, jailbreak attempts, and system prompt extraction before they reach Claude.","tags":["security","llm","prompt-injection","firewall"],"examples":["Is this message trying to jailbreak the AI?","Scan this text for prompt injection patterns."]}]}