Security & Testing Agent Skills for Codex CLI

Static Application Security Testing (SAST) tool setup, configuration, and custom rule creation for comprehensive security scanning across…

Static Application Security Testing (SAST) for code vulnerability

Scans container images, filesystems, and SBOMs for known CVEs with Anchore Grype, matching Syft-generated SBOM packages against NVD…

Integrates Aqua Security''s Trivy scanner into CI/CD pipelines to detect

Scans a Docker image with Trivy for vulnerabilities in OS packages and language dependencies, misconfiguration, exposed secrets, and…

This skill enables Claude to scan applications and data systems for GDPR compliance issues.

Scan a source-code tree for hardcoded credentials embedded in source files: AWS access keys, GitHub tokens, Stripe keys, Slack tokens…

This skill enables comprehensive vulnerability scanning using the vulnerability-scanner plugin.

Tenable Nessus is the industry-leading vulnerability scanner used to

This skill enables Claude to automatically scan source code for potential input validation vulnerabilities.

Performs advanced network recon using Nmap''s Scripting Engine (NSE),

Set up or repair Cisco SCC Firewall Manager with either a complete pipx runtime or a managed Ansible companion for an existing Homebrew…

Implementation guidelines for SDD workflow.

Secure secrets management practices for CI/CD pipelines using Vault, AWS Secrets Manager, and other tools.

Use when the user asks to set up secret management infrastructure, integrate HashiCorp Vault, configure cloud secret stores (AWS Secrets…

Use while the user is writing a new feature — a login flow, an API endpoint, a file upload, cookie handling, Keychain use, a call to an…

Hardens AWS IAM configurations to enforce least-privilege access, covering

Secures container registry images (ECR, ACR, GCR, Docker Hub) by scanning

Configures the security features of the Harbor open-source container registry - integrated Trivy scanning, Cosign and Notary content trust…

Hardens GitHub Actions workflows against supply chain attacks, credential

Audits and hardens process historian servers (OSIsoft PI, Honeywell PHD,