Security & Testing Agent Skills for Codex CLI

Generate threat models using STRIDE, PASTA, or VAST methodologies

When to activate: threat modeling, STRIDE, PASTA, attack tree, DFD, security design review, threat analysis

Use to work out what a system needs to be protected against — when starting a new project, before making an architectural decision, or…

Skill for the Threats_modules area of Securacy. 26 symbols across 5 files.

Protects your codebase by adding deterministic pre-action gates and safety enforcement to AI coding agents.

Toolcraft: use to verify generated apps in a real local browser after implementation.

Toolcraft: use before fixing broken controls, tests, builds, visual mismatches, exports, or runtime regressions.

Audit the active toolguard permission configuration for security risks and flag dangerous allow rules and takeover-mode misconfigurations…

Tests and evaluates any Claude Code skill for structural validity, quality, and trigger accuracy.

Generates a current RFC 6238 TOTP two-factor code from a shared secret the user already holds, via a bundled zero-dependency script that…

Stores and retrieves 2FA shared secrets and single-use backup codes safely - OS keychain, gitignored directory, or CI secret store - and…

Discovers and maps adversary-controlled infrastructure (C2 servers,

Run CTS test suites and investigate failures

Triages security alerts in Splunk Enterprise Security by classifying

Performs initial triage of security incidents using the NIST SP

Runs integration- and E2E-first test-driven development with a small number of broad vertical tests, pure-function unit tests, real…

Run all audit checks (RBAC, hooks, design system, tests) and verify build

Hunting skill for race condition vulnerabilities.

Handle TwinMind meeting data with GDPR compliance: transcript storage,

Configure TOTP authenticator apps, send OTP codes via email/SMS, manage backup codes, handle trusted devices, and implement 2FA sign-in…

GAN thinking mode — when delivering X, also run an adversarial pipe asking "is X fundamentally flawed as a concept? achievable with…