Skill Claude CodeCodex
Domain routing and boundary guidance for authorized reverse engineering analysis, including decompilation, debugging, protocol reversing, firmware extraction, and deobfuscation. Use when a task belongs to the reverse engineering domain and needs scope, evidence, pivot, or exit criteria.
Skill Claude CodeCodex
Domain routing and boundary guidance for authorized SQL injection testing, including union-based, blind, error-based, stacked query, and second-order SQL injection variants. Use when a task belongs to the SQL injection domain and needs scope, evidence, pivot, or exit criteria.
Skill Claude CodeCodex
Domain routing and boundary guidance for authorized SSRF testing, including basic SSRF, blind SSRF, protocol smuggling, and cloud metadata access paths. Use when a task belongs to the SSRF domain and needs scope, evidence, pivot, or exit criteria.
Skill Claude CodeCodex
Domain routing and boundary guidance for authorized server-side template injection testing, including Jinja2, Twig, Freemarker, Velocity, and Thymeleaf engines. Use when a task belongs to the SSTI domain and needs scope, evidence, pivot, or exit criteria.
Skill Claude CodeCodex
Domain routing and boundary guidance for authorized subdomain takeover testing, including dangling CNAME records, NS takeover, and cloud service takeover paths such as S3, Azure, and Heroku. Use when a task belongs to the subdomain takeover domain and needs scope, evidence, pivot, or exit criteria.
Skill Claude CodeCodex
Routing and boundary guidance for authorized general web application security testing. Use as a web testing router when the attack surface should be dispatched to more specific web vulnerability skills.
Skill Claude CodeCodex
Domain routing and boundary guidance for authorized cross-site scripting testing, including reflected, stored, DOM-based, mXSS, and CSP bypass variants. Use when a task belongs to the XSS domain and needs scope, evidence, pivot, or exit criteria.
Skill Claude CodeCodex
Domain routing and boundary guidance for authorized XXE testing, including file read, SSRF, blind XXE, and parameter entity variants. Use when a task belongs to the XXE domain and needs scope, evidence, pivot, or exit criteria.
Skill Claude CodeCodex
A security-testing knowledge base covering web applications, APIs, AI systems, and agents. It combines documented vulnerability examples, testing methods, and risk guidance.
Skill Claude CodeCodex
A workflow guide for testing the security of web applications, which are websites and online services that accept requests and return pages or data. It covers discovery, login and session checks, input handling, and business rules.
Skill Claude CodeCodex
A playbook for advanced security testing of websites, APIs, gateways, and browser-facing services. It covers attacks such as injection, authentication flaws, unsafe file handling, and protocol problems.