Skill Claude CodeCodex
Documentation-first project planning that produces implementation-ready blueprints and single-shot coding agent prompts. Generates 4 interconnected docs — SPECIFICATION.md, IMPLEMENTATION.md, TASKS.md, BRANDING.md — plus a self-contained PROMPT.md for autonomous execution by any coding agent. Includes interactive tech…
Skill Claude CodeCodex
Comprehensive AI-powered security scanning suite with 48 skills covering OWASP Top 10, 7 language-specific deep scanners (Go, TypeScript, Python, PHP, Rust, Java, C#), supply chain analysis, infrastructure-as-code scanning, and 3000+ checklist items. Use when you need to run a security audit, find vulnerabilities…
Skill Claude CodeCodex
REST, GraphQL, and gRPC API security audit — authentication, authorization, data exposure, and configuration.
Skill Claude CodeCodex
Authentication flaw detection — weak passwords, broken auth, credential stuffing, and bypass vectors.
Skill Claude CodeCodex
Authorization flaw detection — IDOR, broken access control, horizontal and vertical privilege issues.
Skill Claude CodeCodex
Business logic flaw detection — price manipulation, workflow bypass, race conditions, and abuse vectors.
Skill Claude CodeCodex
CI/CD pipeline security — GitHub Actions injection, secret exposure, untrusted actions, and artifact poisoning.
Skill Claude CodeCodex
Clickjacking and UI redressing detection — missing frame protection headers and CSP frame-ancestors.
Skill Claude CodeCodex
OS Command Injection detection in shell execution, subprocess calls, and process spawning.
Skill Claude CodeCodex
CORS misconfiguration detection — wildcard origin, reflected origin, null origin, and credential leaks.
Skill Claude CodeCodex
Cryptography misuse detection — weak algorithms, ECB mode, static IVs, weak PRNG, and key management flaws.
Skill Claude CodeCodex
Cross-Site Request Forgery detection — missing tokens, SameSite misconfiguration, and CORS-CSRF interaction.
Skill Claude CodeCodex
Sensitive data exposure detection — PII leaks, verbose errors, debug mode, and information disclosure.
Skill Claude CodeCodex
Supply chain and dependency security analysis across all package ecosystems.
Skill Claude CodeCodex
Insecure deserialization detection across all serialization formats and languages.
Skill Claude CodeCodex
Incremental security scan for changed files only — optimized for PR and commit-level reviews.
Skill Claude CodeCodex
Docker-specific security checks — image hardening, secrets in layers, compose security, and runtime configuration.
Skill Claude CodeCodex
Insecure file upload detection — unrestricted types, MIME mismatch, polyglot files, and webshell upload.
Skill Claude CodeCodex
GraphQL injection, introspection abuse, query complexity attacks, and authorization bypass detection.
Skill Claude CodeCodex
HTTP Header Injection and Response Splitting detection via CRLF injection in headers.
Skill Claude CodeCodex
Infrastructure-as-Code security scanning — Dockerfile, Kubernetes, Terraform, and GitHub Actions misconfigurations.
Skill Claude CodeCodex
JWT implementation flaw detection — algorithm confusion, weak secrets, missing validation, and storage issues.
Skill Claude CodeCodex
C#/.NET-specific security deep scan.
Skill Claude CodeCodex
Go-specific security deep scan.