Skills for your AI
Provides actionable security guidance for systems administrators on passwords, access control, network security, patching, encryption, incident response, training, vulnerability management, backup, auditing, and remote access. Use when drafting security polici
Guides software engineers through security practices including vulnerability scanning, code review, secure coding, testing, incident response, compliance, architecture, encryption, and secure configuration. Use when reviewing code for flaws, planning penetrati
Use when Codex should act as the Blockchain Security Auditor specialist from Agency Agents. Expert smart contract security auditor specializing in vulnerability detection, formal verification, exploit analysis, and comprehensive audit report writing for DeFi p
Use when Codex should act as the Cloud Security Architect specialist from Agency Agents. Cloud-native security specialist designing zero trust architectures, implementing defense-in-depth across AWS, Azure, and GCP, and securing infrastructure-as-code pipeline
Provides structured guidance for security compliance, threat modeling, risk assessments, audits, incident response, and security architecture. Use when asked to review policies against SOC2, ISO27001, GDPR, HIPAA, or PCI-DSS, model threats, build risk register
Use when Codex should act as the Compliance Auditor specialist from Agency Agents. Expert technical compliance auditor specializing in SOC 2, ISO 27001, HIPAA, and PCI-DSS audits — from readiness assessment through evidence collection to certification.
Hardens infrastructure, automates security controls in CI/CD, manages vulnerability and compliance programs, and supports incident response. Use when assessing security posture, deploying controls, automating compliance evidence, scanning vulnerabilities, desi
PreToolUse security-anti-pattern hook for Claude Code. Catches 12 common security risks (command injection, XSS, SQL injection, unsafe deserialization, GitHub Actions workflow injection, eval/new Function code injection) BEFORE the Edit/Write/MultiEdit operati
Use when Codex should act as the Incident Responder specialist from Agency Agents. Digital forensics and incident response specialist who leads breach investigations, contains active threats, coordinates crisis response, and writes post-mortems that prevent re
Builds a security ownership topology from git history and computes bus factor for sensitive code. Use when the user asks for security-oriented ownership or bus-factor analysis of a git repository, sensitive-code ownership mapping, or export of ownership graphs
Provides security testing payloads and bypass techniques for XSS, SSRF, SQLi, XXE, NoSQLi, command injection, path traversal, IDOR, and authentication bypass. Use when testing authorized targets or bug bounty programs for these vulnerability classes.
Use when the user asks to perform security audits, penetration testing, vulnerability scanning, OWASP Top 10 checks, or offensive security assessments. Covers static analysis, dependency scanning, secret detection, API security testing, and pen test report gen
Use when Codex should act as the Penetration Tester specialist from Agency Agents. Offensive security specialist conducting authorized penetration tests, red team operations, and vulnerability assessments across networks, web applications, and cloud infrastruc
Plans authorized web application penetration tests from codebase analysis, producing a detailed pentest-plan.md with test cases tied to real code, endpoints, and config. Use when the user requests a pentest plan, security assessment plan, or attack surface rev
Drafts, reviews, aligns, and implements organizational security policies against standards and regulations. Use when researching policy best practices, building policy frameworks, drafting policy documents, reviewing existing policies, mapping policies to GDPR
Assesses and mitigates security risks across systems, vendors, and processes, producing risk registers, control assessments, policy reviews, incident response plans, and compliance reports. Use when the user needs vulnerability scanning, threat modeling, risk
Use when Codex should act as the Senior SecOps Engineer specialist from Agency Agents. Defensive application security specialist who scans every code submission for secrets and sensitive data exposure before anything else, then implements or audits security co
Guides users through security threats, fixes, and protective measures with step-by-step instructions. Use when a user reports malware symptoms, needs firewall, password, phishing, patching, encryption, backup, Wi-Fi, mobile, or antivirus help.
Guides cybersecurity analysts through planning and configuring security technologies such as firewalls, VPNs, IDS, SIEM, DLP, endpoint protection, email gateways, WAFs, vulnerability management, MFA, SOC/SOAR, and encryption. Use when an analyst asks for step-
Plans and reviews security testing work — vulnerability assessment, penetration testing, code and architecture review, threat modeling, compliance, tool evaluation, patch management, training, incident response, authentication, encryption, mobile and cloud sec
Use when Codex should act as the Threat Detection Engineer specialist from Agency Agents. Expert detection engineer specializing in SIEM rule development, MITRE ATT&CK coverage mapping, threat hunting, alert tuning, and detection-as-code pipelines for security
Identifies and mitigates security threats through vulnerability assessment, log and malware analysis, threat intelligence, incident response, network traffic analysis, threat modeling, policy review, and security awareness work. Use when a cybersecurity analys
Use when Codex should act as the Threat Intelligence Analyst specialist from Agency Agents. Cyber threat intelligence specialist who tracks adversary groups, maps attack campaigns to MITRE ATT&CK, produces actionable intelligence reports, and builds detection
Produces an evidence-based Markdown threat model for a repository or path, covering system model, trust boundaries, assets, entry points, attacker calibration, prioritized threats, and mitigations. Use when asked to threat model a repo, service, or path, or to
