Security & Testing Agent Skills for Codex CLI

CUSTOM NON-PUBLIC. Hash-only immut proofs (fingerprint only; file never uploaded). Use only for bespoke deployments that must not send…

Configures and deploys Palo Alto Networks next-generation firewalls end-to-end,

Write custom Semgrep SAST rules in YAML to detect application-specific

Guides teams through IT outages and security incidents, providing structured workflows for detection, containment, eradication, and…

Use when writing or reviewing code that processes user input — validates and sanitizes to prevent SQL injection, XSS, CSRF, and other…

Build F*, Pulse, and KaRaMeL from source (fstar2 branch) for use in a verification project

This skill enables automated penetration testing of web applications.

Interface-first, dependency-injected Python architecture - Protocols and Pydantic models in an `interfaces` package, implementations in a…

A skill with invalid characters in the name.

Use when packaging an ISSTA tool, benchmark, and results for the artifact-evaluation track, covering the ACM badges (Artifacts Available…

Use when designing or auditing ISSTA experiments, covering real subject programs and benchmarks like Defects4J, fair tool-baseline…

Use when strengthening ISSTA reproducibility and verifiability evidence, covering pinned subject programs and benchmark versions, random…

Use when revising an ISSTA paper for a clear testing/analysis contribution, covering the threat-model-then-technique structure, the…

When to activate: Java security, Spring Security, JWT, OAuth2, SecurityFilterChain, method security, CSRF, CORS, password encoding

Risk-focused Java test design, implementation, review, and CI planning.

Red-green-refactor loop for adding or changing behaviour.

Use when the user mentions Clawpatch/clawpatch.ai, semantic feature review, repo-wide AI audit, persistent findings, or clawpatch…

Use when checking code for vulnerabilities, linting shell scripts, scanning containers or IaC for security issues, or managing encrypted…

Evaluate Agent Skill design quality against official specifications and best practices.

12 regulatory & QM agent skills and plugins for Claude Code, Codex, Gemini CLI, Cursor, OpenClaw.

Generates comprehensive stress test reports and performance trend charts from JMeter summary logs and run metrics.