Security & Testing Agent Skills for Codex CLI

Assess SSL/TLS server configurations using the sslyze Python scanning library to evaluate supported protocol versions, cipher suite…

Enumerate subdomains of target domains using ProjectDiscovery's Subfinder

Simulates and detects software supply chain attacks: typosquatting detection via Levenshtein distance against popular PyPI package names…

Executes Atomic Red Team tests for MITRE ATT&CK technique validation

Performs proactive threat hunting in Elastic Security SIEM using KQL/EQL

Use YARA pattern-matching rules to hunt for malware, suspicious files,

Conducts a sector-specific threat landscape assessment (financial, healthcare, energy, government, etc.) by profiling targeting threat…

Uses OWASP Threat Dragon (web or desktop) to build data flow diagrams, identify threats with STRIDE, LINDDUN, CIA, DIE, or PLOT4ai…

Simulates VLAN hopping attacks using switch spoofing and 802.1Q double tagging techniques in authorized lab environments to test VLAN…

Performs authenticated and unauthenticated vulnerability scanning using

Bypasses Web Application Firewall protections using encoding tricks,

Performs systematic security testing of web applications following the

Exploiting web cache mechanisms to serve malicious content to other users

Captures WPA/WPA2 handshakes and performs offline password cracking

Execute a wireless network penetration test to assess WiFi security by

Conduct wireless network security assessments using Kismet to detect

Develops precise YARA and YARA-X rules for malware detection by identifying

Comprehensive Perl security covering taint mode, input validation, safe process execution, DBI parameterized queries, web security…

Implement Perplexity load testing, auto-scaling, and capacity planning strategies.

Implement Perplexity lint rules, policy enforcement, and automated guardrails.

Work with Persona verification types: government ID, selfie, database