Security & Testing Agent Skills for Codex CLI

Emergency defensive response when the user believes they're under active attack — hacked, compromised, credentials stolen, suspicious…

Apply after completing a task, before declaring done.

Prove a frontend performance change with paired, measured before/after numbers instead of projections.

Expert skill for proxy server implementation, configuration, and traffic interception

You are an expert Rails Pundit policy test developer.

Production-grade Playwright testing toolkit.

Drive PWN::AI::Context from pwn_eval.

Guides the structured engineering workflow for binary vulnerability analysis, debugging, and proof-of-concept stabilization.

Generate synthetic evaluation datasets for the PXI eval harness (evals/pxi/).

Pairwise test generation

Guides the agent on how to run clean python styling, Black/Ruff compliance checks, and pytest execution on changed python scripts.

Standardizes pytest workflows by prioritizing behavior-driven testing and robust isolation patterns to ensure resilient test suites.

Enforces strict Python code quality standards using pytest, mypy, ruff, black, and isort.

Audits Python libraries for security vulnerabilities using Bandit, pip-audit, Semgrep, and detect-secrets.

When to activate: Python security review, OWASP, SQL injection, secrets management, authentication, cryptography

Use this when authoring integration tests against a real backend (PostgreSQL, Redis, Kafka, MinIO, NATS, MongoDB), debugging slow or flaky…

Verify claims in a session/PR/transcript against on-disk reality.

Senior QA/QC engineer that evaluates existing codebases for test quality.

Implement the "handoff context" produced by qa-discovery in concrete test code. Use it ONLY when a developer has already…

Use when reviewing or planning QA strategy for a feature, PR, or release so test coverage, test quality, reliability, and defect reporting…

Multi-agent QA review team for code changes.