Skill Claude CodeCodex
Domain assessment and web application mapping - subdomain discovery, port scanning, endpoint enumeration, API discovery, and attack surface analysis.
494 1mo ago A 30 tokens
original MIT
Skill Claude CodeCodex
Re-validates every previously-confirmed finding against its current target — detects drift (patched, mitigated, re-introduced). Cron-driven weekly sweep across the org's validated finding tree.
494 1mo ago A 43 tokens
original MIT
Skill Claude CodeCodex
Static and dynamic reverse engineering — ELF/PE analysis, custom-VM bytecode, packed binaries, anti-debug bypass, Frida hooking.
494 1mo ago A 32 tokens
original MIT
Skill Claude CodeCodex
Risk-based prioritisation of confirmed attack paths. Combines exploit feasibility, technical CVSS severity, and asset business impact into a single ranked list driving remediation roadmaps.
494 1mo ago A 39 tokens
original MIT
Skill Claude CodeCodex
Generates optimized, syntax-validated scripts on demand. Never executes — only generates, optimizes, and validates.
494 1mo ago A 26 tokens
original MIT
server-side
54Skill Claude CodeCodex
Server-side vulnerability testing - SSRF, HTTP Request Smuggling, Path Traversal, File Upload, Insecure Deserialization, and Host Header injection.
494 1mo ago A 33 tokens
original MIT
skill-prune
55Skill Claude CodeCodex
Identify and remove negative-ROI skill content — orphan files, never-read entries, duplicates, content reintroducing challenge-specific lore. Inverse of /skill-update. Use during quarterly maintenance or after the linter flags issues.
494 1mo ago A 49 tokens
original MIT
skill-update
56Skill Claude CodeCodex
Skill creation, update and management — generates skill directory structure, validates against best practices, enforces line count limits. Use when creating, updating, or improving skills.
494 1mo ago A 36 tokens
original MIT
Skill Claude CodeCodex
Social engineering testing - phishing, pretexting, vishing, and physical security assessment techniques.
494 1mo ago A 23 tokens
original MIT
Skill Claude CodeCodex
Security-focused source code review and SAST. Scans for vulnerabilities (OWASP Top 10, CWE Top 25), CVEs in third-party dependencies/packages, hardcoded secrets, malicious code, and insecure patterns. Use when given source code, a repo path, or asked to "audit", "scan", "review" code security, or "check dependencies…
494 1mo ago A 82 tokens
original MIT
system
59Skill Claude CodeCodex
System exploitation testing - Active Directory attacks, privilege escalation (Linux/Windows), and exploit development.
494 1mo ago A 21 tokens
original MIT
Skill Claude CodeCodex
OSINT-based technology stack identification. Routes to 6 domain sub-skills (frontend, backend, infra, security, osint, correlation) to discover a target's stack from publicly available signals.
494 1mo ago A 45 tokens
original MIT
Skill Claude CodeCodex
Backend tech-stack identification — web servers, runtimes, languages, frameworks, databases, APIs, and CMS via HTTP headers, cookies, error pages, and API discovery.
494 1mo ago A 39 tokens
original MIT