Security & Testing Agent Skills for Codex CLI

Use after generating code, after accepting AI suggestions, or when reviewing AI-written modules.

Migrate .NET test projects from xUnit.net v2 to xunit.v3 and fix v3 breaks.

Enumerate Entra ID with ROADrecon and acquire and exchange tokens with roadtx.

Augments Trailmark code graphs with external audit findings from SARIF static analysis results, weAudit annotation files, and…

Analyze text and images for harmful content using Azure AI Content Safety (@azure-rest/ai-content-safety).

Master Bash Automated Testing System (Bats) for comprehensive shell script testing.

Tests in real browsers via Chrome DevTools MCP.

Burp Suite Professional is an HTTP interception proxy with numerous security testing features.

Use when a C++ failure involves memory lifetime, undefined behavior, native crashes, or debugger-only state — debug with symbols…

This skill should be used when generating comprehensive test cases from PRD documents or user requirements.

When to activate: cloud security, IAM, AWS Security Hub, GuardDuty, CloudTrail, CSPM, SCP, shared responsibility, cloud posture management

Compliance review against Dutch and EU law: GDPR/AVG, EU AI Act, accessibility (EAA/WCAG), NIS2, CRA, licensing.

Use when designing a new agent-tool-* / agent-harness-* CLI that reads API keys or secrets from the environment.

Create new ESLint rules for the @n8n/eslint-plugin-community-nodes package.

Use when about to claim work is complete, fixed, or passing, before committing or creating PRs — requires running verification commands…

Set up and run Deepsec vulnerability scans, triage, and CI gates.

Detect and triage exposed credentials, tokens, private keys, and sensitive configuration in an authorized repository or provided artifacts.

Extracts resources and JavaScript from any installed Electron app (`.asar` bundle), restoring original sources from `.js.map` files when…

Guides Playwright end-to-end test design — Page Object Model, CI configuration, and flaky test diagnosis.

Fix failing or flaky Playwright tests. Use when user says "fix test", "flaky test", "test failing", "debug test", "test broken", "test…

Compile an informal task description into a deterministic Harness-Driven Delegation Specification with an automated validation loop, for…