Skill Claude CodeCodex
Use when auditing code for security issues. Runs OWASP Web Top 10 (2025) checklist and — if AI/GenAI components present — OWASP LLM Top 10 (2025). Produces severity-tagged findings with file:line evidence.
Plugin Claude Code
PR workflow skills — full code review (OWASP + language-specific) and PR comment listing.
Skill Claude CodeCodex
List every open comment on the current branch's PR with file name and line number. Use when the user runs /checkcomments or asks to see PR review comments. Read-only — finds the open PR, fetches inline and general comments, and prints them grouped by file.
Skill Claude CodeCodex
Review a GitHub pull request and post severity-tagged inline comments with file:line evidence. Use when asked to review a PR or code-review a diff, or when the post-push hook surfaces open PR comments. Produces an OWASP + language-standards + test-quality + change-discipline review and a verdict.