Agent
After changing code that handles input, authentication, authorization, secrets, queries, commands, templates, dependencies, or deployment configuration.
Agent
After changing code that handles input, authentication, authorization, secrets, queries, commands, templates, dependencies, or deployment configuration.
Skill Claude CodeCodex
Scan code for injection, hardcoded secrets, XSS, dynamic code execution, and unsafe shell use. Use after writing or modifying code that handles user input, builds queries or commands, touches authentication, or adds a dependency — and whenever the user asks for a security check, audit, or review. Runs locally with no…
MCP server Claude CodeCodexCursor +2
Deterministic security scanning, no model or API key, plus offline-verifiable proof a fix worked. Runs locally from the dvalincode npm package.