A catalog, not a mascot
Cortex ships a library of 10,000+ skills generated from archetypes × the Risk/Cyber/GRC taxonomy, with hand-curated flagships on top. Before meeting ten of them, meet the two rules every one of them obeys.
The catalog
Breadth from generation, depth from curation
Generated skills
10,000+
archetypes × taxonomy, expanded automatically
Curated flagships here
10
contracts transcribed from the shipping definitions
Out-of-scope domains — HR, legal, sales, procurement — are deliberately not registered. Breadth is worthless if it wanders off the platform's ground truth.
Stated limit
Prompts stay server-side. What this walkthrough shows is the part that matters for trust: the contracts.
The two leashes
| Invariant | What it means |
|---|---|
| Runs as the calling user | An agent can never read data you couldn't read yourself — permissions are yours, not the platform's. |
| Proposes, never mutates | Every action is a proposal awaiting a human decision, recorded on the tamper-evident generation ledger. |
Refused
No agent in the catalog is exempt from either rule — not the flagships, not the generated ten thousand.