Skill Claude CodeCodex
Use when auditing a Gwxapkg unpacked WeChat Mini Program directory with LLM assistance; consumes .gwxapkg semantic artifacts, route maps, sensitivereport.json, and optional Burp raw requests to produce evidence-backed security findings.
Agent
An analyzer for finding possible authentication and authorization weaknesses in APIs. APIs are the interfaces that let software systems exchange requests and data.
Agent
A tool for matching a raw Burp Suite HTTP request with the corresponding Gwxapkg source API, pseudocode, and call chain. Burp Suite is a web-security tool that records and edits HTTP requests.
Agent
A business-risk analyst that examines application workflows such as sign-in, verification codes, password resets, licence searches, orders, and payments.
Agent
An agent that turns an unpacked Gwxapkg directory into a compact audit checklist. Gwxapkg is an unpacked WeChat Mini Program package, and the agent reviews its generated maps and reports.
Agent
An agent that checks whether a security evidence package covers the important parts of a codebase. It looks for missing files, APIs, endpoints, dynamic behavior, plugins, large archives, source maps, and unmatched requests.
Agent
An analysis agent for tracing encoding, encryption, signatures, device fingerprints, and fixed user-agent logic visible in front-end code. It distinguishes reversible encoding from encryption and signing, and records how fields flow through these operations.
Agent
An agent that turns analysis results into a Chinese security report and structured JSON. It records confirmed problems separately from risks that still need checking and links each finding to evidence such as file lines or packaged outputs.
Agent
An audit guide for reviewing suspected secrets in a JSON report, such as passwords, tokens, private-key fragments, phone numbers, and encoded text.