Skills for your AI
Use when Codex should act as the Senior SecOps Engineer specialist from Agency Agents. Defensive application security specialist who scans every code submission for secrets and sensitive data exposure before anything else, then implements or audits security co
Guides users through security threats, fixes, and protective measures with step-by-step instructions. Use when a user reports malware symptoms, needs firewall, password, phishing, patching, encryption, backup, Wi-Fi, mobile, or antivirus help.
Guides cybersecurity analysts through planning and configuring security technologies such as firewalls, VPNs, IDS, SIEM, DLP, endpoint protection, email gateways, WAFs, vulnerability management, MFA, SOC/SOAR, and encryption. Use when an analyst asks for step-
Plans and reviews security testing work — vulnerability assessment, penetration testing, code and architecture review, threat modeling, compliance, tool evaluation, patch management, training, incident response, authentication, encryption, mobile and cloud sec
Use when Codex should act as the Threat Detection Engineer specialist from Agency Agents. Expert detection engineer specializing in SIEM rule development, MITRE ATT&CK coverage mapping, threat hunting, alert tuning, and detection-as-code pipelines for security
Identifies and mitigates security threats through vulnerability assessment, log and malware analysis, threat intelligence, incident response, network traffic analysis, threat modeling, policy review, and security awareness work. Use when a cybersecurity analys
Use when Codex should act as the Threat Intelligence Analyst specialist from Agency Agents. Cyber threat intelligence specialist who tracks adversary groups, maps attack campaigns to MITRE ATT&CK, produces actionable intelligence reports, and builds detection
Produces an evidence-based Markdown threat model for a repository or path, covering system model, trust boundaries, assets, entry points, attacker calibration, prioritized threats, and mitigations. Use when asked to threat model a repo, service, or path, or to
Customizes security tools (firewall, SIEM, endpoint, IDPS, encryption, access control) to an organization's infrastructure and risk profile, producing comparisons, rules, integration and validation plans, documentation, and response playbooks. Use when evaluat
Builds cybersecurity training programs, awareness campaigns, phishing simulations, policy communications, incident reporting materials, and assessments for any employee audience. Use when the user needs a training module, campaign package, phishing simulation,
Identifies, assesses, and tracks security vulnerabilities across code, networks, and policies, producing prioritized findings, threat models, compliance reports, and remediation plans. Use when asked to scan code or infrastructure, design penetration test scen
Honestly evaluate AI work quality using a two-axis scoring system. Use after completing a task, code review, or work session to get an unbiased assessment. Detects score inflation, forces devil's advocate reasoning, and persists scores across sessions.
Creates, updates, refactors, explains, and debugs .NET Semantic Kernel code grounded in the latest official documentation. Use when building Semantic Kernel .NET projects, plugins, or agents, updating or refactoring existing SK code, explaining SK concepts, wo
Builds, refactors, explains, and debugs Python AI applications using Semantic Kernel, following official docs and samples. Use when creating a Semantic Kernel project, updating outdated SK code, explaining SK concepts like plugins or memory, debugging SK error
This skill should be used when the user asks to "design system architecture", "evaluate microservices vs monolith", "create architecture diagrams", "analyze dependencies", "choose a database", "plan for scalability", "make technical decisions", or "review syst
Designs and implements backend systems including REST APIs, microservices, database architectures, authentication flows, and security hardening. Use when the user asks to "design REST APIs", "optimize database queries", "implement authentication", "build micro
Scaffolds REST/GraphQL API projects, analyzes schemas and generates database migrations, load-tests endpoints, and advises on API design, database optimization, and backend security. Use when the user needs an API skeleton, migration analysis, performance test
Comprehensive DevOps skill for CI/CD, infrastructure automation, containerization, and cloud platforms (AWS, GCP, Azure). Includes pipeline setup, infrastructure as code, deployment automation, and monitoring. Use when setting up pipelines, deploying applicati
Generates CI/CD pipeline configs, Terraform modules, deployment and Kubernetes manifests, Dockerfiles, and DevOps quality reports as reviewable drafts. Use when the user asks to set up a pipeline, scaffold infrastructure as code, generate deployment or contain
Frontend development skill for React, Next.js, TypeScript, and Tailwind CSS applications. Use when building React components, optimizing Next.js performance, analyzing bundle sizes, scaffolding frontend projects, implementing accessibility, or reviewing fronte
Fullstack development toolkit with project scaffolding for Next.js, FastAPI, MERN, and Django stacks, code quality analysis with security and complexity scoring, and stack selection guidance. Use when the user asks to "scaffold a new project", "create a Next.j
ML engineering skill for productionizing models, building MLOps pipelines, and integrating LLMs. Covers model deployment, feature stores, drift monitoring, RAG systems, and cost optimization. Use when the user asks about deploying ML models to production, sett
Generates unit tests, integration tests, and E2E tests for React/Next.js applications. Scans components to create Jest + React Testing Library test stubs, analyzes Istanbul/LCOV coverage reports to surface gaps, scaffolds Playwright test files from Next.js rou
Senior SecOps engineer skill for application security, vulnerability management, compliance verification, and secure development practices. Runs SAST/DAST scans, generates CVE remediation plans, checks dependency vulnerabilities, creates security policies, enf
