Instructions file CodexOpenCode
Instructions for woohyun212/security-skill, covering security-skill, purpose, key files, subdirectories and skills.
Instructions file CodexOpenCode
Instructions for woohyun212/security-skill, covering security-skill, purpose, key files, subdirectories and skills.
Instructions file
Instructions for woohyun212/security-skill, covering security-skill development rules, project overview, skill rules, skill.md frontmatter required fields and security principles.
Skill Claude CodeCodex
Active Directory pentest with BloodHound attack path analysis, Kerberos/ADCS attacks, credential harvesting, and lateral movement.
Skill Claude CodeCodex
Guided bug bounty hunting session with recon, mapping, discovery, exploitation, and reporting phases with escalation routing.
Skill Claude CodeCodex
Pre-submission validation for bug bounty findings with scope/impact/exploitability gates, CVSS scoring, and submit/kill verdict.
Skill Claude CodeCodex
Multi-chain smart contract security for Solana, Algorand, Cairo, Cosmos, Substrate, and TON with pre-audit readiness checks.
Skill Claude CodeCodex
Parse X.509 certificate details and verify certificate chain integrity.
Skill Claude CodeCodex
Certificate Transparency log search via crt.sh API to discover subdomains and certificates.
Skill Claude CodeCodex
Multi-cloud CSPM assessment using ScoutSuite/Prowler with IAM privilege escalation, storage exposure, and network posture for AWS/Azure/GCP.
Skill Claude CodeCodex
Detect timing side-channel vulnerabilities in cryptographic code caused by secret-dependent branching and memory access patterns.
Skill Claude CodeCodex
Detect CORS misconfiguration by testing various Origin headers and analyzing Access-Control responses.
Skill Claude CodeCodex
CVE detail lookup from NVD API v2 with CVSS scores, vectors, and affected products.
Skill Claude CodeCodex
Dependency vulnerability audit across Node.js, Python, and Go ecosystems.
Skill Claude CodeCodex
Assess CI/CD pipeline security maturity, identify DevSecOps gaps, and generate GitHub Actions/GitLab CI configs with security gates.
Skill Claude CodeCodex
Security-focused git diff analysis to detect regressions, new vulnerabilities, and unsafe changes in code reviews.
Skill Claude CodeCodex
DNS record reconnaissance and zone transfer attempts using dig, host, and nslookup.
Skill Claude CodeCodex
Encode/decode strings (Base64, URL, Hex, HTML, ROT13, JWT) for payload transformation, WAF bypass, and encoded data analysis.
Skill Claude CodeCodex
Identify and classify state-changing entry points in smart contracts and applications to map the attack surface.
Skill Claude CodeCodex
Escalate confirmed low/medium findings into high-impact exploit chains (A→B→C) with combined CVSS scoring.
Skill Claude CodeCodex
Identify hash algorithm type from a hash string and optionally verify against a known plaintext.
Skill Claude CodeCodex
Detect insecure default configurations including weak crypto, fail-open patterns, default credentials, and unsafe framework settings.
Skill Claude CodeCodex
Extract Indicators of Compromise (IOC) from text, logs, or files.
Skill Claude CodeCodex
Interactive gap analysis against Korea's ISMS-P 102-control certification framework (management, protection, personal information).
Skill Claude CodeCodex
LLM/AI application security testing for prompt injection, system prompt leakage, tool abuse, and output handling per OWASP AI Security Top 10.