Security & Testing Agent Skills for Codex CLI

Configures secure OAuth 2.0 authorization flows, including Authorization

Configures TLS 1.3 (RFC 8446) on servers, covering cipher suite and

Configures Microsoft Defender for Endpoint (MDE) advanced protection

Configures Windows Event Logging with advanced audit policies to generate

Calculates CRAP (Change Risk Anti-Patterns) for a named .NET method, class, or file.

Scaffolds eval.yaml evaluation specs for agent skills in the dotnet/skills repository.

/cs:fda-qsr-audit-prep <scope> — FDA 21 CFR 820 (QSR / QMSR) audit 6-question forcing interrogation.

/cs:iso27001-audit-prep <scope> — ISO 27001 ISMS audit readiness 6-question forcing interrogation.

Expert skill for GPU debugging using CUDA-GDB and NVIDIA Compute Sanitizer.

Find the most appropriate CWE for the vulnerability using the Varsel MCP's local CWE catalog, then propose it onto the case.

Use when code has been written and needs validation before committing, or when the user asks for a code review or security check.

Use when encountering any bug, test failure, or unexpected behavior, before proposing fixes

Systematic debugging frameworks for finding and fixing bugs - includes root cause analysis, defense-in-depth validation, and verification…

Create, review, and harden GitHub Dependabot configuration for new or existing repositories.

Use when the user asks to "add a dependency", "vet a license", "check if this package is safe to use", "can we use this library", "add…

Deploys Palo Alto Networks Prisma Access for SASE-based zero trust network access, configuring GlobalProtect agents, ZTNA Connectors…

Deploy AI and NLP-powered detection systems to identify business email

Detect abuse of elevation control mechanisms (T1548), including Windows UAC

Detects typosquatting attacks in npm and PyPI package registries by

Prowler UI-specific patterns. For generic patterns, see: typescript, react-19, nextjs-16, tailwind-4. Trigger: When working inside ui/ on…