Skill Claude CodeCodex
Pre-release simulated penetration testing from the AI/LLM red-team perspective — direct/indirect prompt injection, model extraction, jailbreak, hallucination-leverage, agentic misalignment, alignment-faking probe. Model-invoked by the Ultrasafe orchestrator (Workflow fan-out, Phase B) during ≥3 iteration pre-release…
Skill Claude CodeCodex
Pre-release simulated penetration testing from the cryptography attacker perspective — key management / random source / TLS misuse / signature scheme / constant-time violation / PQC readiness / cryptographic agility envelope. Triggered by Ultrasafe orchestrator (ultrasaferunfanout MCP tool) when the axis-set includes…
Skill Claude CodeCodex
Use BEFORE a publish-equivalent release (npm publish / pip upload / git push --tags to public) — Ultrasafe 8-agent fan-out 의 Methodology / Compliance attacker 시각. Test methodology gap · coverage cliff · compliance catalog (NIST 800-115 / OSSTMM / OWASP WSTG / PTES / ISO 27001:2022 / CIS v8.1) 의 16-cell 2D dispatch…
Skill Claude CodeCodex
Pre-release security testing — simulated penetration from the social-engineering / human-factor attacker perspective. Use when the Ultrasafe orchestrator dispatches Agent 5 of the 8-agent fan-out at iteration N (usf-social-eng axis 포함 시), or when a publish-equivalent command triggers the PreToolUse hook and the…
Skill Claude CodeCodex
Pre-release simulated penetration testing from the dependency / SBOM / typosquatting / signing-chain perspective. Invoke as Agent 3 of the Ultrasafe 8-agent fan-out (Ultrasafe.md §15.3) whenever the iteration axis-set includes usf-supply-chain, or whenever a release candidate touches dependency manifests (package.json…
Skill Claude CodeCodex
Pre-release security testing — retire-barrier fan-out sink. Aggregate the 7 attacker agents' findings (ai-llm / web-api / supply-chain / crypto / social-eng / methodology / threat-model) via BFT quorum 2f+1 cross-axis confirmation, diversity-enforced source independence (perspective × prompttemplatehash × seed 3-tuple…
Skill Claude CodeCodex
Pre-release simulated penetration testing from the threat modeling (STRIDE/PASTA) + incident lifecycle + disclosure timing attacker perspective. Invoke as one of 8 attackers in Ultrasafe fan-out runtime when a publish-equivalent action (npm publish / pip upload / git push --tags to public / release-gate trigger) is…
Skill Claude CodeCodex
Pre-release simulated penetration testing from the OWASP Top 10 / API contract / auth-bypass / SQLi / XSS / SSRF / CSRF / open-redirect / IDOR attacker perspective. Invoke during Ultrasafe ≥3-iteration fan-out when the axis-set includes usf-web-sast-dast or usf-web-infra, or when a PreToolUse trigger matches a…
Plugin Claude Code
Public TWDD methods and agent skills from SoliEstre.
Plugin Claude Code
Test-Window-Driven Development skill for scarce validation windows, hard abort boundaries, replayable evidence, and batched repair.
Instructions file CodexOpenCode
AGENTS.md instructions for SoliEstre/twdd, covering public repository rules, read before changing files, public boundary, writing level and method rules.
Skill Claude CodeCodex
Plan and execute Test-Window-Driven Development when meaningful real-world validation is scarce, scheduled, long-running, expensive, or tied to a market, partner, field visit, hardware rig, or limited environment. Use to maximize safe, decision-relevant, replayable evidence per test window through preflight…
Plugin Claude Code
Public IDD methods and agent skills from SoliEstre.
Plugin Claude Code
Implementation-Driven Development skill for isolated probes, human decisions, contracts, and independent verification.
Instructions file CodexOpenCode
AGENTS.md instructions for SoliEstre/idd, covering public repository rules, read before changing files, public boundary, writing level and method rules.
Skill Claude CodeCodex
Route software work through Implementation-Driven Development when product meaning or behavior is materially uncertain and a disposable implementation can safely produce evidence. Use for ambiguous product features, new integrations, LLM or agent behavior, unfamiliar APIs, UX alternatives, legacy discovery, or…