Security & Testing Agent Skills for Codex CLI

Use for authorized security assessment of REST, GraphQL, WebSocket, or SOAP APIs, including discovery, authentication, authorization…

API security testing workflow for REST and GraphQL APIs covering authentication, authorization, rate limiting, input validation, and…

Test automate API endpoint testing including request generation, validation,

Auto-generate comprehensive API tests for REST and GraphQL endpoints with request/response validation

Comprehensive API testing for REST and GraphQL endpoints with contract validation

IyBBUEkgVmVyaWZ5IFRlc3QgU2tpbGwKQXV0b21hdGVkIHZlcmlmaWNhdGlvbiBjb21taXQgZnJvbSBNdWx0aS1BZ2VudCBzeXN0ZW0uCkRhdGU6IDIwMjYtMDQtMjQK

Production readiness checklist for AppFolio integrations.

Implement access control for multi-user Apple Notes automation.

Apply security best practices for Apple Notes automation scripts.

[COMMUNITY] Assess Austrian NISG obligations (BGBl.

[COMMUNITY] Generate an Australian Energy Sector Cyber Security Framework maturity assessment for energy-sector projects with IT, OT…

[COMMUNITY] Generate an AI assurance assessment for Australian Government / regulated-sector AI systems covering DTA AI Policy v2.0, ISO…

[COMMUNITY] Generate a DISP (Defence Industry Security Program) Member self-attestation pack covering E8 ML2, ISM applicability…

[COMMUNITY] Generate a DTA Digital Service Standard compliance assessment for Australian Government digital services against all 13…

[COMMUNITY] Generate an Australian energy-sector compliance architecture pack covering AER ring-fencing, AEMC NER/NGR, AEMO interfaces…

Mechanical guard that lists every existing test assertion or test declaration a diff removes — each hit is a parity event needing a…

Perform a scoped, non-destructive security assessment of a web application or API the user is authorized to test.

Async testing patterns with race condition and timing issue detection

Provides file paths to language-specific extension files for the code-testing pipeline.

Use this skill before answering, planning, or editing any MSTest 3.x-to-4.x upgrade or post-upgrade failure.

Deep formal test smell audit based on academic research taxonomy (testsmells.org).