Security & Testing Agent Skills for Codex CLI

Detect and prevent publicly exposed cloud object storage (S3/GCS/Azure Blob).

Enforces disciplined test-driven development cycles through strict Red-Green-Refactor workflows and automated quality gate checks.

Build/fix features with test-first development, review, and doc sync.

Comprehensive quality verification: spec compliance, lint, type-check, tests, cross-layer data flow, code reuse, and consistency checks.

Multi-dimensional code assessment across security, quality, performance, and maintainability with confidence-gated reporting (>=80%) and…

Multi-dimensional code review across correctness, security, performance, and maintainability with confidence-gated reporting and…

Review representative Code2Skill main flows for closure / Lightweight review of whether the representative Code2Skill main processes are…

Configure CodeRabbit enterprise access control, seat management, and

Configure CodeRabbit for security-focused code review with secret detection

Audit a Codex home directory for control-plane drift, risky state, and cleanup opportunities across config, agents, hooks, skills…

Trigger machine account authentication with PetitPotam (MS-EFSR) and Coercer across MS-RPRN, MS-DFSNM, and MS-FSRVP to feed NTLM relay…

Enforce meta-cognitive honesty and hallucination guardrails.

Apply Cohere security best practices for API key management and access

Analyze code changes for security vulnerabilities using LLM reasoning and threat model patterns.

Expert reverse engineer specializing in binary analysis, disassembly, decompilation, and software analysis.

This skill should be used when performing a security review or audit of Compact smart contract code, or when reasoning about Compact's…

Inspects storyboards and visual scripts for NSFW, violent, and sensitive content to ensure platform policy compliance.

Toolkit for interacting with and testing local web applications using Playwright.

Complete testing strategy covering TDD workflow, test pyramid, unit/integration/E2E/property testing, framework best practices (Jest…

Use when tests have race conditions, timing dependencies, or inconsistent pass/fail behavior - replaces arbitrary timeouts with condition…

Plan and execute a comprehensive, MITRE ATT&CK-aligned red team engagement spanning threat modeling, reconnaissance, initial access, and…