hat-blackbox
01Skill Claude CodeCodex
Black-box hat — test ONLY against the published contract; you may NOT read the implementation.
not rated 2 1mo ago A 22 tokens
2Stars on the repository
10Mods indexed here, across every type
1mo agoLast push, which is what freshness is scored on
noneNo LICENSE: all rights reserved, so bodies are not copied
hat-design
02Skill Claude CodeCodex
Design/DRY hat — review this diff ONLY for architecture, duplication, and maintainability.
not rated 2 1mo ago A 22 tokens
hat-security
03Skill Claude CodeCodex
Security hat — review this diff ONLY through a security lens. One vantage, deep, no other concerns.
not rated 2 1mo ago A 24 tokens
owasp-review
04Skill Claude CodeCodex
Reviews application code for OWASP Top 10 style vulnerabilities (injection, broken access control / IDOR, SSRF, XSS, secrets, insecure deserialization, security misconfiguration). Use when reviewing a diff, an endpoint, or a file for security issues, or whenever the user asks for a security pass, OWASP check, or "is…
not rated 2 1mo ago B 81 tokens
self-verify
05Skill Claude CodeCodex
Self-verifying loop — build, test, and lint before presenting any diff, then self-critique.
not rated 2 1mo ago A 26 tokens
triage
06Skill Claude CodeCodex
Triage a single security finding end to end — confirm real vs. false positive, then remediate or dismiss with a written record.
not rated 2 1mo ago A 30 tokens
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: