Security & Testing Agent Skills for Codex CLI

Design and review acceptance / end-to-end tests with the four-layer model (spec / DSL / protocol driver / SUT).

Sets up and runs Atheris, the coverage-guided Python fuzzer built on libFuzzer.

Secondary Authoritative Time Source

Audit the developer experience of a product, SDK, docs site, or SKILL.md by dropping multiple Claude subagents at it with only a tiny task…

Inventories every SSH key, Git signing key, GPG key, and Keychain credential on a macOS machine and reports weak, stale, unprotected…

Auditing Kubernetes cluster RBAC configurations to identify overly permissive

Auditing Terraform infrastructure-as-code for security misconfigurations

Sonnet Amplified fullstack engine. 34 modes, SEC-01~15 OWASP security, 13 runtime hooks, 75% token reduction.

Production-ready Auth.js v5 setup for Next.js and Cloudflare Workers.

Check installed community skills for updates.

AWS security configuration scanning and hardening using Prowler, Security Hub, and AWS Config

AI-powered E2E web testing — eyes and hands for AI coding tools.

Build content moderation applications using the Azure AI Content Safety SDK for Java.

Azure security configuration scanning and hardening using Azure Security Center, Azure Policy, and ScoutSuite

Testing patterns for Prowler API: JSON:API, Celery tasks, RLS isolation, RBAC.

Scan code changes for security vulnerabilities using STRIDE threat modeling, validate findings for exploitability, and output structured…

Automates the migration of symbols and reverse-engineering results between different binary versions using AI-powered structural comparison.

Migrate configuration from Bluejay voice AI testing platform to Coval.

Expand test automation coverage for codebase.

Automate Borneo tasks via Rube MCP (Composio).

Generate test scenarios from git branch changes.