Skill Claude CodeCodex
A web-testing skill built around Playwright, a browser automation tool. It checks how web pages behave, look, respond on different screen sizes, handle forms, and support accessibility.
Skill Claude CodeCodex
A static security checker that examines source code and configuration files for possible web vulnerabilities. Static checking means reviewing code without running the application; IPA is Japan’s Information-technology Promotion Agency.
Agent
A code-review agent that checks files for SQL injection, a flaw where user input changes a database query. SQL is the language commonly used to read and change database data.
Agent
A code-review agent that checks files for OS command injection, a security flaw where outside input can make a program run unintended operating-system commands. It uses rules and guidance from Japan’s IPA web-security documents.
Agent
A code-review agent that checks files for directory traversal, a flaw where a path supplied by a user can reach files outside the intended folder. It follows security guidance from Japan’s IPA.
Agent
A code-review agent that checks files for session-management weaknesses, such as unsafe handling of login sessions. A session is the state that keeps a user signed in across requests.
Agent
A specialized code-review agent that checks for cross-site scripting, a web vulnerability where untrusted content is executed as code in another user’s browser. It follows Japanese IPA web-security guidance.
Agent
A code-review agent that checks files for cross-site request forgery, or CSRF. CSRF is an attack that tricks a signed-in user’s browser into sending an unwanted request.
Agent
A specialised code-review agent that checks files for HTTP header injection, a web security flaw where untrusted input can alter response headers.
Agent
A specialized code-review agent that checks for email header injection, a vulnerability where untrusted input can alter email headers. It follows security rules and Japanese IPA web-security guidance.
Agent
A static security-checking sub-agent for clickjacking, an attack that places a real page beneath a deceptive page so a user clicks something different from what they see. It checks only the files assigned to it against defined inspection rules and security guidance.
Agent
A security-checking sub-agent that performs static inspection for buffer overflows, where code writes beyond the memory reserved for a value.