Security & Testing Agent Skills for Codex CLI

Prevent destructive, irreversible, high-risk or uncontrolled actions by any agent.

Use when the user requests authorized SSH or SFTP operations on a remote server.

Use when an agent may change state; bound authority, scope, and read-back.

Use this skill to prevent destructive operations when working on production systems or running agents autonomously.

Accessibility audit skill for scanning, fixing, and verifying WCAG 2.2 Level A and AA compliance across React, Next.js, Vue, Angular…

Adversarial code review that breaks the self-review monoculture.

Use when assessing AI/ML systems for prompt injection, jailbreak vulnerabilities, model inversion risk, data poisoning exposure, or agent…

Use when planning, running, or learning from chaos engineering experiments.

Security leadership for growth-stage companies.

Use when assessing cloud infrastructure for security misconfigurations, IAM privilege escalation paths, S3 public exposure, open security…

Compliance OS — meta-orchestrator that lets compliance teams CONFIGURE which frameworks apply, COMPUTE cross-framework control overlap…

/cs:ai-act-readiness <system> — EU AI Act 6-question forcing interrogation.

/cs:fda-qsr-audit-prep <scope> — FDA 21 CFR 820 (QSR / QMSR) audit 6-question forcing interrogation.

/cs:gdpr-audit-prep <scope> — GDPR audit 6-question Article-cited forcing interrogation.

/cs:iso13485-audit-prep <scope> — ISO 13485 QMS audit 6-question forcing interrogation.

/cs:iso27001-audit-prep <scope> — ISO 27001 ISMS audit readiness 6-question forcing interrogation.

/cs:soc2-audit-prep <scope> — SOC 2 Type II readiness 6-question forcing interrogation.

Audit and manage dependencies across multi-language projects.

Manage environment-variable hygiene and secrets safety across local development and production.

FDA regulatory consultant for medical device companies.

Configure Salesforce Profiles, Permission Sets, and Sharing Rules for