Security & Testing Agent Skills for Codex CLI

Verify claims in a session/PR/transcript against on-disk reality.

Use it when a developer wants to start writing tests for a module, prepare a release, research existing coverage, or…

Implement the "handoff context" produced by qa-discovery in concrete test code. Use it ONLY when a developer has already…

Multi-agent QA review team for code changes.

Generate QA test cases from branch diff and PR body for manual testing handoff.

Design focused QA cases and investigate suspected product defects with Opsphere evidence.

Add Google OAuth login to a Next.js app using NextAuth.js v4 + PrismaAdapter + JWT sessions.

Generate and validate qtip Subject Manifests for software projects.

Use when a user wants an AI assistant or coding agent to provide setup guidance, evaluation, review, improvement, recommendation…

Unified quality gates for Laravel projects; Pint, static analysis (PHPStan/Psalm), Insights (optional), and JS linters; Sail and non-Sail…

Quarantines an intermittently failing test behind a ticket with an owner and expiry, assigns a root-cause bucket from isolated reruns, and…

Proves the system works by writing and executing comprehensive test suites.

This skill should be used when the user asks to "check for race conditions", "find TOCTOU bugs", "analyze concurrency issues", "detect…

Security audit, hardening, threat modeling (STRIDE/PASTA), Red/Blue Team, OWASP checks, code review, incident response, and infrastructure…

Provide comprehensive techniques for attacking Microsoft Active Directory environments.

Evaluate agent behavior with versioned cases and explicit verifiers.

Audits GitHub Actions workflows for security vulnerabilities in AI agent integrations including Claude Code Action, Gemini CLI, OpenAI…

Use before responding to pressure for agreement, manufactured urgency, authority appeals, or requests to certify unsupported claims…

Provide comprehensive techniques for testing REST, SOAP, and GraphQL APIs during bug bounty hunting and penetration testing engagements.

Implement secure API design patterns including authentication, authorization, input validation, rate limiting, and protection against…

Build comprehensive attack trees to visualize threat paths.