Security & Testing Agent Skills for Codex CLI

Expert security auditor specializing in DevSecOps, comprehensive cybersecurity, and compliance frameworks.

Use when the user takes over an inherited system, codebase, server, or cloud account from a prior developer — or when leaked secrets, open…

Build a minimal but real security policy for sensitive apps.

Security-first auditing of AI-generated code — Level 1 quick checks during /toh-dev and /toh-test (hardcoded secrets, dangerous code…

Generated code must be aligned with security headers (e.g. no unsave JS eval).

Analyze code, infrastructure, and configurations by conducting comprehensive

This skill ensures all code follows security best practices and identifies potential vulnerabilities.

Isolated analysis environment management for malware and exploit testing.

Run full security scans on the codebase using Ruflo security tools.

AgentShield security audit with 5 scanning categories, 102 static analysis rules, and optional red-team simulation.

Triage OpenClaw security advisories, drafts, and GHSA reports with shipped-tag and trust-model proof.

Verify code for security issues including hardcoded secrets, input validation, error exposure, and dependency vulnerabilities.

Seed reproducible local Langfuse data in ClickHouse and Postgres.

Use when about to claim work is done / verified / working — empirical verification is required, not model-based confidence.

Captures visible macOS app windows and verifies UI changes against explicitly approved baselines.

Sets up and runs libFuzzer, the coverage-guided fuzzer built into LLVM, on C/C++ code that compiles with Clang.

Demonstrate self-hosted CI runner abuse (CICD-SEC-7, insecure system configuration) during an authorized assessment — abusing a…

Hunting skill for cache poison vulnerabilities.

Senior FDA consultant and specialist for medical device companies including HIPAA compliance and requirement management.

Senior ISMS Audit Expert for internal and external information security management system auditing.