tahirraufkeeyu/software-development-agent-stack--sdas
Skill Claude CodeCodex
Use when a rep has a customer meeting booked and needs a pre-meeting brief. Produces a one-page dossier with company context, attendee LinkedIn profiles and recent activity, role-based priorities, a draft agenda, talking points tied to research, anticipated objections, and a defined success metric.
tahirraufkeeyu/software-development-agent-stack--sdas
Skill Claude CodeCodex
Use when a rep needs a complete, personalized outbound package for a named prospect account. Orchestrates research, competitive analysis, a 3-touch email sequence, and a discovery-call prep brief into a single reviewable markdown bundle.
tahirraufkeeyu/software-development-agent-stack--sdas
Skill Claude CodeCodex
Use when a rep needs to generate a tailored customer proposal after discovery. Produces a full proposal document mapping their stated requirements to our solution, with scope, deliverables, phased timeline, pricing, assumptions, case studies, team bios, and next steps.
tahirraufkeeyu/software-development-agent-stack--sdas
Skill Claude CodeCodex
Use when a rep receives a formal RFP, RFI, or security questionnaire. Parses the document into a requirement tree, maps each item to our capabilities, flags must-have gaps early, and drafts compliant section-by-section responses using the customer's language and cited evidence.
tahirraufkeeyu/software-development-agent-stack--sdas
Skill Claude CodeCodex
Use when the user asks for a "SOC 2 gap analysis", "ISO 27001 readiness check", or evidence collection for an upcoming audit. Maps SOC 2 Trust Service Criteria (CC1-CC9) and ISO 27001 Annex A controls against collected evidence, identifies gaps, and produces a remediation ticket list with owner/priority.
tahirraufkeeyu/software-development-agent-stack--sdas
Skill Claude CodeCodex
Use when compliance-check has produced control gaps (SOC2, ISO 27001, HIPAA, PCI) and you need to close them. Classifies each gap as Design / Operating / Evidence, drafts or configures the missing policy / control / evidence artifact, maps the closure to the control ID, and assembles the auditor-ready evidence locker.
tahirraufkeeyu/software-development-agent-stack--sdas
Skill Claude CodeCodex
Use when container-scan has produced findings on a Docker/OCI image and you need to rebuild it clean. Rebases to a patched base image, upgrades OS packages, hardens the Dockerfile (non-root user, distroless or slim, multi-stage, HEALTHCHECK), strips secrets from layers using BuildKit mounts, and verifies closure by…
tahirraufkeeyu/software-development-agent-stack--sdas
Skill Claude CodeCodex
Use when the user asks to "scan this container", before a registry push, or as a release gate for a Docker/OCI image. Runs Trivy image + filesystem + secret scans, verifies distroless/non-root user, checks Dockerfile best practices, and blocks on Critical/High CVEs.
tahirraufkeeyu/software-development-agent-stack--sdas
Skill Claude CodeCodex
Use when the user asks to "audit dependencies", "check for CVEs", or before a release. Runs CVE scanning across every detected package manager (npm/yarn/pnpm, pip/poetry, Go modules, Cargo, Maven/Gradle), produces CVSS-scored findings with fix-version recommendations and explicit flags for transitive dependencies.
tahirraufkeeyu/software-development-agent-stack--sdas
Skill Claude CodeCodex
Use when dependency-audit has produced CVE findings and you need to close them. Triages each finding into upgrade / transitive override / patch / replace / accept-with-mitigation, applies the fix per ecosystem (npm, pip, go, cargo, maven), verifies with tests, updates SBOM and lockfiles, and writes the audit trail.
tahirraufkeeyu/software-development-agent-stack--sdas
Skill Claude CodeCodex
Use when preparing for a release, a SOC2/PCI audit window, or any "sweep everything" security request. Chains secret-scanner, dependency-audit, security-audit, container-scan (if applicable), and pentest-report end-to-end and produces a single dated pentest report.
tahirraufkeeyu/software-development-agent-stack--sdas
Skill Claude CodeCodex
Use when full-security-audit has produced findings across secrets, dependencies, SAST/DAST, containers, and compliance, and you want to close them end-to-end. Dispatches each class of finding to the paired remediation skill, re-runs the originating scanner to verify closure, computes before/after deltas, and writes a…
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: