Skill Claude CodeCodex
Test REST/SOAP/GraphQL APIs for mass assignment, injection, excessive data exposure, rate limiting.
not rated 20
+2 today A 27 tokens
AGPL-3.0
Skill Claude CodeCodex
Test directory traversal, privilege escalation, business logic, IDOR, horizontal/vertical access.
not rated 20
+2 today A 23 tokens
AGPL-3.0
Skill Claude CodeCodex
Test business logic data validation, ability to forge requests, integrity checks, process timing, function limit.
not rated 20
+2 today A 26 tokens
AGPL-3.0
Skill Claude CodeCodex
Test DOM XSS, HTML5 storage, WebSocket, CORS, postMessage, local file access.
not rated 20
+2 today A 28 tokens
AGPL-3.0
Skill Claude CodeCodex
Test network infrastructure config, application platform config, file handling, admin interfaces, HTTP methods, RIA cros.
not rated 20
+2 today A 31 tokens
AGPL-3.0
Skill Claude CodeCodex
Test for weak SSL/TLS, padding oracle, weak encryption, clear-text transmission.
not rated 20
+2 today A 23 tokens
AGPL-3.0
Skill Claude CodeCodex
Test reflected/stored/DOM XSS, SQL injection, LDAP injection, ORM injection, command injection, format string.
not rated 20
+2 today A 30 tokens
AGPL-3.0
Skill Claude CodeCodex
Test for stack traces, verbose errors, CWE search, improper error handling.
not rated 20
+2 today A 21 tokens
AGPL-3.0
Skill Claude CodeCodex
Test credential encryption in transit, authentication bypass, weak lockout, password reset, security question, multi-fac.
not rated 20
+2 today A 30 tokens
AGPL-3.0
Skill Claude CodeCodex
Systematic information gathering: search engine discovery, web server fingerprinting, review page content for info leaka.
not rated 20
+2 today A 27 tokens
AGPL-3.0
Skill Claude CodeCodex
Test session tokens for entropy, predictability, fixation, logout, timeout, cookie scope.
not rated 20
+2 today A 24 tokens
AGPL-3.0
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: