Security & Testing Agent Skills for Codex CLI

Automates relentless iterative development cycles using independent verification gates to ensure tasks are completed without human…

Make a cloud account compliant with a security or industry framework using Prowler Cloud.

Debug issues methodically — use when stuck on errors, test failures, or unexpected behavior

Build features with tests-before-code rigor — use for new features needing test coverage

Semgrep is a fast static analysis tool for finding bugs and enforcing code standards.

Drives development with tests. Use when implementing any logic, fixing any bug, or changing any behavior. Use when you need to prove that…

Set up, repair, or migrate to Cloudflare Turnstile bot verification in an existing frontend and backend, including server-side Siteverify.

This skill should be used when the user asks to "plan a penetration test", "create a security assessment checklist", "prepare for…

Cross-vendor adversarial code review of the current branch.

Parses Kubernetes API server audit logs (JSON lines) to detect exec-into-pod, secret access, RBAC modifications, privileged pod creation…

Find and prove excessive data exposure (part of API3:2023) in an API during an authorized test — endpoints that return more object…

Use when fixing dependency vulnerabilities, running pnpm audit, or when the audit-dependencies CI check fails

BDD requirements discovery methodology - Example Mapping, Three Amigos, conversational patterns, Given-When-Then translation, and…

Burp Suite Professional is an HTTP interception proxy with numerous security testing features.

Scans Cairo/StarkNet smart contracts for 6 critical vulnerabilities including felt252 arithmetic overflow, L1-L2 messaging issues, address…

Safety guardrails for destructive commands.

Read-only drift detector. Diffs SPEC.md against current code and reports violations grouped by severity. Writes nothing — suggests…

Bug diagnosis and fixing specialist - analyzes errors, identifies root causes, provides fixes, and writes regression tests.

Debug and analyze errors following best practices

Check every dependency in a package.json against live CVE databases and security advisories in real time — specifically targeting…

Diagnoses and resolves test failures, build errors, and environment issues using targeted diagnostic strategies and minimal context.