Agent skills for Codex CLI

Performs API inventory and discovery to identify all API endpoints in

Tests API rate limiting for bypass vulnerabilities using Python (requests/aiohttp)

Analyze Content-Security-Policy headers and bypass them to achieve cross-site

Performs runtime dynamic analysis of Android applications using Frida,

Performing comprehensive security assessments of Google Cloud Platform

Execute and test GraphQL depth limit attacks using deeply nested recursive

Integrates Hardware Security Modules (HSMs) via the PKCS#11 interface

Analyze IP address reputation using the Shodan API to identify open ports,

Enrich malware file hashes (MD5, SHA-1, SHA-256) using the VirusTotal

Systematically investigate all persistence mechanisms on Windows and

Performs rapid malware triage and classification using YARA rules that

Open Source Intelligence (OSINT) gathering is the first active phase

Automate OSINT collection with the SpiderFoot REST API and CLI (sf.py/spiderfoot-cli) across 200+ modules, selecting scan modes…

Monitor paste sites like Pastebin and GitHub Gists for leaked credentials,

Discovers and inventories privileged accounts across enterprise infrastructure,

Performs tabletop exercises for SOC teams simulating security incidents

Simulates and detects software supply chain attacks: typosquatting detection via Levenshtein distance against popular PyPI package names…

Performs proactive threat hunting in Elastic Security SIEM using KQL/EQL

Conducts a sector-specific threat landscape assessment (financial, healthcare, energy, government, etc.) by profiling targeting threat…

Executes web cache deception attacks by exploiting path normalization

Conduct wireless network security assessments using Kismet to detect