RedHatProductSecurity/prodsec-skills
Skill Claude CodeCodex
Enforce authentication for agents connecting to MCP servers via MCP clients. Use when designing or reviewing how AI agents authenticate to MCP servers.
RedHatProductSecurity/prodsec-skills
Skill Claude CodeCodex
Audits GitHub Actions workflows for security vulnerabilities in AI agent integrations including Claude Code Action, Gemini CLI, OpenAI Codex, and GitHub AI Inference. Detects attack vectors where attacker-controlled input reaches AI agents running in CI/CD pipelines, including env var intermediary patterns, direct…
RedHatProductSecurity/prodsec-skills
Skill Claude CodeCodex
Apply when selecting, reviewing, or configuring cryptographic algorithms, cipher suites, protocol versions, or key exchange mechanisms. Covers banned/deprecated/recommended algorithms, post-quantum readiness, key management, and OpenSSL API migration.
RedHatProductSecurity/prodsec-skills
Skill Claude CodeCodex
Secure Apache Camel route deployments across endpoint, payload, route, and configuration layers. Use when building, reviewing, or auditing Camel routes, integration pipelines, or Camel-based microservices.
RedHatProductSecurity/prodsec-skills
Skill Claude CodeCodex
Atheris is a coverage-guided Python fuzzer based on libFuzzer. Use for fuzzing pure Python code and Python C extensions.
RedHatProductSecurity/prodsec-skills
Skill Claude CodeCodex
Enables ultra-granular, line-by-line code analysis to build deep architectural context before vulnerability or bug finding.
RedHatProductSecurity/prodsec-skills
Skill Claude CodeCodex
Enforce authentication and authorization at the API gateway for AI systems. Use when designing, building, or reviewing API gateways that front inference engines, LLM APIs, or AI model endpoints.
RedHatProductSecurity/prodsec-skills
Skill Claude CodeCodex
Enforce authorization checks for external data source access in AI systems. Use when designing, configuring, or reviewing access controls between AI components and external databases or data services.
RedHatProductSecurity/prodsec-skills
Skill Claude CodeCodex
Avoid using API keys in production AI systems. Use when reviewing authentication mechanisms, designing production deployments, or auditing credential management in AI and agentic systems.
RedHatProductSecurity/prodsec-skills
Skill Claude CodeCodex
Enforce AWS security baselines for IAM, networking, logging, and managed services like RDS. Use when building, reviewing, or auditing AWS infrastructure, IAM policies, VPC configuration, or RDS deployments.
RedHatProductSecurity/prodsec-skills
Skill Claude CodeCodex
Deploy runtime guardrails for bidirectional prompt and response filtering in AI systems. Use when designing, building, or reviewing AI architectures that need prompt injection protection, content filtering, or input/output safety controls.
RedHatProductSecurity/prodsec-skills
Skill Claude CodeCodex
Apply when reviewing or writing GitLab CI (.gitlab-ci.yml), Tekton pipeline/task YAML, or Containerfiles/Dockerfiles used in CI builds. Detects common misconfigurations that expose secrets, weaken isolation, skip security gates, grant excessive privileges, or produce insecure container images.
RedHatProductSecurity/prodsec-skills
Skill Claude CodeCodex
Skill "cargo-fuzz" from RedHatProductSecurity/prodsec-skills, covering cargo-fuzz, when to use, quick start, edit fuzz/fuzztargets/fuzztarget1.rs with your harness and installation.
RedHatProductSecurity/prodsec-skills
Skill Claude CodeCodex
Support OAuth Client ID Metadata Documents in authorization servers. Use when building or reviewing authorization server client validation and registration mechanisms for MCP ecosystems.
RedHatProductSecurity/prodsec-skills
Skill Claude CodeCodex
Apply when reviewing or writing browser-facing code that handles user input, renders HTML, sets cookies, or loads third-party scripts. Covers XSS, CSRF, CSP, clickjacking, XS-Leaks, and HTTP security headers.
RedHatProductSecurity/prodsec-skills
Skill Claude CodeCodex
Scans a codebase for security vulnerabilities using CodeQL's interprocedural data flow and taint tracking analysis. Triggers on "run codeql", "codeql scan", "codeql analysis", "build codeql database", or "find vulnerabilities with codeql". Supports "run all" (security-and-quality + security-experimental suites) and…
RedHatProductSecurity/prodsec-skills
Skill Claude CodeCodex
Apply compiler hardening flags and sanitizers to C/C++ builds. Use when reviewing build configurations, CI pipelines, or Makefiles/CMakeLists for native code projects.
RedHatProductSecurity/prodsec-skills
Skill Claude CodeCodex
Enforce granular OAuth scopes and explicit user consent in MCP servers. Use when designing, building, or reviewing MCP server permission models, scope definitions, or consent flows.
RedHatProductSecurity/prodsec-skills
Skill Claude CodeCodex
Detects timing side-channel vulnerabilities in cryptographic code. Use when implementing or reviewing crypto code, encountering division on secrets, secret-dependent branches, or constant-time programming questions in C, C++, Go, Rust, Swift, Java, Kotlin, C#, PHP, JavaScript, TypeScript, Python, or Ruby.
RedHatProductSecurity/prodsec-skills
Skill Claude CodeCodex
Constant-time testing detects timing side channels in cryptographic code. Use when auditing crypto implementations for timing vulnerabilities.
RedHatProductSecurity/prodsec-skills
Skill Claude CodeCodex
Enforce container security best practices for MCP servers, including OpenShift integration. Use when containerizing MCP servers or reviewing container security configurations for MCP deployments.
RedHatProductSecurity/prodsec-skills
Skill Claude CodeCodex
Coverage analysis measures code exercised during fuzzing. Use when assessing harness effectiveness or identifying fuzzing blockers.
RedHatProductSecurity/prodsec-skills
Skill Claude CodeCodex
Configure CPU isolation, scheduling policies, storage provisioning, and image pull policies for latency-sensitive Kubernetes workloads. Use when writing, reviewing, or auditing pod specs for telco, far-edge, or real-time workloads that require deterministic CPU performance.
RedHatProductSecurity/prodsec-skills
Skill Claude CodeCodex
Extracts protocol message flow from source code, RFCs, academic papers, pseudocode, informal prose, ProVerif (.pv), or Tamarin (.spthy) models and generates Mermaid sequenceDiagrams with cryptographic annotations. Use when diagramming a crypto protocol, visualizing a handshake or key exchange flow, extracting message…