Skill Claude CodeCodex
Use when the user asks for a security analysis or audit of a project, or asks "is this safe?" — a website, a backend API, an iOS/macOS app or a GitHub repository alike. Presents findings with evidence and says plainly which areas were not covered.
Skill Claude CodeCodex
Use to work out what a system needs to be protected against — when starting a new project, before making an architectural decision, or when the question "is this system secure enough?" comes up. Reads no code; derives the assets, the trust boundaries and the attacker model.
MCP server Claude CodeCodexCursor +2
Static security scanner that needs no parser: web/backend source and Apple platform configuration, as both a CLI and an MCP server. Runs locally from the saglitzsecure npm package.