Skill Claude CodeCodex
Unified automation entry point. Covers browser automation (Playwright) and Windows desktop application automation (OpenReverse). Browser scenarios: open web pages, click, fill forms, scrape, take screenshots, automated logins, pentest page interactions. Desktop scenarios: operate GUI tools such as IDA/x64dbg, Windows…
Skill Claude CodeCodex
Use for authorized reverse engineering of browser extensions (Chrome/Firefox) including manifest analysis, background workers, and extension-based credential or traffic logic recovery.
Skill Claude CodeCodex
Use for authorized cloud, container, and Kubernetes security assessment including metadata SSRF, IAM misconfig, container escape paths, and cluster RBAC review.
Skill Claude CodeCodex
Use for authorized source-code security review and SAST workflows including Semgrep, CodeQL patterns, dangerous API hunting, and fix verification.
Skill Claude CodeCodex
Use for authorized database security assessment covering PostgreSQL/MySQL/MSSQL/Mongo/Redis exposure, authz, UDF/command paths, and misconfiguration review.
Skill Claude CodeCodex
Create clear, editable diagrams from messy or structured inputs. Prefer text-based diagram source first so the result can be reviewed, versioned, and refined. Render to files only when the user asks for an image/PDF or when a downloadable artifact would materially help.
Skill Claude CodeCodex
Use for authorized digital forensics including memory dumps, disk timelines, PCAP investigation, artifact triage, and IR evidence preservation.
Skill Claude CodeCodex
Creates task-oriented technical documentation with progressive disclosure. Use when writing READMEs, API docs, architecture docs, or markdown documentation. Also use this skill at the END of any completed reverse engineering, penetration testing, CTF, or security analysis task to generate a formal report in the user's…
Skill Claude CodeCodex
.NET / C# binary reverse engineering. Use when the target is a .NET assembly (CLR in the PE header, managed .exe/.dll programs), C# build artifacts (including NativeAOT), red team Sharp tools (Rubeus / SharpHound, etc.), .NET obfuscated programs (ConfuserEx / SmartAssembly / Babel / Eazfuscator), or .NET loaders /…
Skill Claude CodeCodex
Reverse engineering defender implementations → Red Team targeted bypass. Reverse engineer EDR / Defender / AV hook tables, ETW providers, and AMSI implementations first, then write targeted unhooking / indirect syscalls / ETW patches / call stack spoofing. Aligned with MITRE ATT&CK T1562 Impair Defenses. Trigger…
Skill Claude CodeCodex
Use for authorized email security review including phishing analysis, header authentication (SPF/DKIM/DMARC), BEC patterns, and mailbox token abuse research.
Skill Claude CodeCodex
Finding-validation discipline: promote scanner/hunch output from "candidate" to "confirmed", or demote it to false positive. Hypothesis matrix, minimal repro, negative control, rate guardrails, evidence closure, post-fix retest. Trigger keywords: validate finding, false positive, PoC, reproduction, exploit validation…
Agent
Master coordinator for authorized AI penetration testing — master coordinator for multi-agent orchestration, skill loading, and evidence tracking, skill loading, and evidence tracking.
Agent
Specialist agent for deep vulnerability discovery and validation — loads enhanced exploitation skills per vulnerability class and produces PoC-backed findings.
Skill Claude CodeCodex
Authorized AI penetration testing assistant for web applications, APIs, and infrastructure. Performs reconnaissance, vulnerability assessment, PoC validation, exploit chaining, and professional reporting. Use when the user asks for pentest, penetration test, security assessment, vulnerability scan, bug bounty…
Skill Claude CodeCodex
A set of methods for testing the security of APIs, which are interfaces that let software exchange data and request actions.
Skill Claude CodeCodex
JWT and OIDC security testing covering token forgery, algorithm confusion, and claim manipulation.
Skill Claude CodeCodex
AWS cloud security testing covering IAM misconfigurations, S3 exposure, metadata abuse, and privilege escalation paths.
Skill Claude CodeCodex
BFLA testing for action-level authorization failures across endpoints, admin functions, and API operations.
Skill Claude CodeCodex
Fast browser automation CLI for AI agents. Chrome/Chromium via CDP, no Playwright or Puppeteer dependency. Accessibility-tree snapshots with compact @eN refs let agents interact with pages in 200-400 tokens instead of parsing raw HTML.
Skill Claude CodeCodex
Business logic testing for workflow bypass, state manipulation, and domain invariant violations.
Skill Claude CodeCodex
A set of methods for auditing cloud security, meaning checking whether systems and data hosted by cloud providers are configured safely.
Skill Claude CodeCodex
RCE testing covering command injection, deserialization, template injection, and code evaluation.
Skill Claude CodeCodex
A set of methods for testing the security of software containers, which package an application and its dependencies together.