Security & Testing Agent Skills for Codex CLI

Audit the union of every IAM policy attached to one principal for privilege-escalation paths that no single statement reveals, and for…

IDA Pro Python scripting for reverse engineering.

This skill should be used when the user asks to "test for insecure direct object references," "find IDOR vulnerabilities," "exploit broken…

Implements API Security Posture Management (API-SPM) to continuously

Implements API security testing on the 42Crunch platform, combining

Implements API threat protection using Google Apigee reverse-proxy

Implements application whitelisting using Windows AppLocker to restrict

Implement RPKI-based BGP route origin validation by creating Route Origin

Deploys remote browser isolation (RBI) as a core component of a Zero

Deploys DNS, HTTP, and AWS API key canary tokens across network infrastructure

Assess, gap-analyze, and progressively implement the CISA Zero Trust

Implements cloud workload protection using boto3 and google-cloud APIs

Reduces container attack surface by building application images on Google distroless base images that ship only the application runtime…

Deploys Breach and Attack Simulation (BAS) platforms such as SafeBreach,

Implements device posture assessment as a zero trust access control

The Diamond Model of Intrusion Analysis provides a structured framework

Implements digital signatures using the Ed25519 algorithm (Curve25519), covering key-pair generation, signing, signature verification, and…

Configures SPF, DKIM, and DMARC DNS TXT records to authenticate outbound email, prevent domain spoofing, and enforce a…

Implements eBPF-based security monitoring using Cilium Tetragon for

Email sandboxing detonates suspicious attachments and URLs in isolated

Implements a simplified Signal Protocol-style end-to-end encryption scheme for messaging, covering key exchange, forward secrecy, and the…