Security & Testing Agent Skills for Codex CLI

Plant canarytokens and honey credentials and alert on breach.

Design and create a simulation persona for testing an AI agent.

Detect and block spearphishing emails that use personalized, researched

Use when diagnosing or fixing functional bugs, flaky tests, regressions, crashes, data corruption symptoms, production incidents, or…

Agent-only procedure for diagnosing reported bugs.

Exploratory QA of web apps: find bugs, evidence, reports.

Get SARIF from `dotnet build` via the compiler ErrorLog property, using a per-project relative path so later projects do not overwrite…

Expert firmware analyst specializing in embedded systems, IoT security, and hardware reverse engineering.

Use when you need to programmatically drive another MiMoCode (mimo) process — supports both headless `mimo run` with JSON events and…

Methodically run the RivetKit driver test suite file by file across the native (NAPI) and wasm runtimes, tracking progress in…

Use when a bug or performance issue is still fuzzy — build the fastest feedback loop first, rank the leading hypotheses, and instrument…

Use when you need end-to-end tests for critical user flows that unit tests can't cover — scaffolds Playwright/Cypress tests from the happy…

Use when you need to evaluate an LLM pipeline or AI feature systematically — sets up an eval harness with test cases, scoring rubrics, and…

Use when a codebase needs a formal security audit beyond a quick scan — applies OWASP Top 10 and STRIDE threat modeling from a CSO…

Use when the goal is practical vulnerability discovery for responsible disclosure or bounty submission — focuses on remotely reachable…

Use when you want a quick security pass on code changes or dependencies — checks OWASP Top 10 patterns, runs dependency audits, and…

Use when a bug is non-obvious or has resisted quick fixes — applies a 4-phase root cause analysis to find and permanently resolve the…

Use when starting a new feature or function to write failing tests first, then implement the minimal code to pass (Red→Green→Refactor)

Analyse a MOSIP DSL orchestrator run (DSL rig) end to end - point at a cluster via kubeconfig, pull the full-run or sanity report from…

REQUIRED when modifying any file in packages/playground-ui or packages/playground.

Run E2E tests or interactive browser verification.