Security Analyst
HIGH RISKroles.security-analyst.intro
🛡️Safety Model
Default Behavior
Requires human approval for all actions
Human Approval Required
Yes, always by default
Common Workflows
- 1Triage security alerts
- 2Assess risk and likely impact
- 3Recommend containment actions
- 4Draft incident communication
- 5Track remediation progress
Permissions & Controls
✓Draft security assessments
✓Cannot execute system changes
✓Cannot modify access controls
✓All actions require approval
What This Role Does NOT Do
- ✕Executing destructive actions or changes to systems
- ✕Directly modifying access controls or permissions
- ✕Running penetration tests or active security scans
- ✕Accessing production systems without authorization
- ✕Disclosing vulnerability details externally