Security & Testing Agent Skills for Codex CLI

MISP (Malware Information Sharing Platform) is an open-source threat

Collect volatile forensic evidence from a compromised system following

Conducts security testing of REST, GraphQL, and gRPC APIs to identify

Responds to security incidents in cloud environments (AWS, Azure, GCP) by performing identity-based containment,

This skill outlines methodologies for performing authorized penetration

Conducts external reconnaissance using Open Source Intelligence (OSINT)

Plan and execute a comprehensive red team engagement covering reconnaissance

Execute an internal network penetration test simulating an insider threat

Conduct internal Active Directory reconnaissance using BloodHound Community

Responds to malware infections across enterprise endpoints by identifying the malware family, determining infection

Simulates man-in-the-middle attacks using Ettercap, mitmproxy, and Bettercap

Performs memory forensics analysis using Volatility 3 to extract evidence

Conducts penetration testing of iOS and Android mobile applications

Conducts comprehensive network penetration tests against authorized

Pass-the-Ticket (PtT) is a lateral movement technique that uses stolen

Responds to phishing incidents by analyzing reported emails, extracting

Facilitate structured post-incident reviews to identify root causes,

Plan and execute authorized vishing (voice phishing) pretext calls to

Conducts authorized wireless network penetration tests to assess the

Implement Microsoft's Enhanced Security Admin Environment (ESAE) tiered

Configures host-based intrusion detection systems (HIDS) to monitor