Checkmarx Marketplace for agentic solutions
This repository also configures its own agents. See what cx-agentic-ai tells them →
Skill Claude CodeCodex
Installs, configures, and authenticates the Checkmarx cx CLI (API key or browser OAuth sign-in). Use when the cx CLI is missing, outdated, or not authenticated. Invoke as: $cx-cli-setup.
Skill Claude CodeCodex
Runs a Checkmarx ASCA (AI Security Code Assistant) SAST scan on a SOURCE CODE file to detect code vulnerabilities, and remediates findings using the Checkmarx MCP tool. Use when a user asks to scan or fix a source code file (.py/.js/.java/.go/.ts/…) for security vulnerabilities. Also invoke this skill automatically…
Skill Claude CodeCodex
Runs a Checkmarx SCA (Software Composition Analysis / OSS) scan on dependency manifests and lockfiles to detect vulnerable and malicious open-source packages, and remediates findings using the Checkmarx MCP tool. Use when a user asks to scan dependencies, check packages, audit a manifest/lockfile (package.json…
Skill Claude CodeCodex
Runs a Checkmarx KICS (Keeping Infrastructure as Code Secure) scan on an IaC file — Dockerfile, Terraform, Kubernetes YAML, and similar templates — to detect infrastructure misconfigurations, and remediates findings using the Checkmarx MCP tool. Use when a user asks to scan or fix an IaC file (Dockerfile, .tf…
Skill Claude CodeCodex
Runs a Checkmarx secret realtime scan on a file to detect hardcoded secrets, and remediates findings using the Checkmarx MCP tool. Use when a user asks to scan or fix a file for hardcoded secrets, credentials, tokens, or keys. The secret engine scans every file except dependency manifests, nodemodules, and Checkmarx…
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: