Skill Claude CodeCodex
Runs an OWASP Top 10 security audit (access control, cryptographic failures, injection, insecure design, misconfiguration, vulnerable components, auth failures, data integrity, logging failures, SSRF) and a dependency CVE scan against the project's package manager, then writes a PASS/FAIL report to…
Skill Claude CodeCodex
End-to-end bug-fix workflow that runs /diagnose first to produce a disciplined root-cause report (.devkit/diagnose.md), then orchestrates coder → tester → reviewer agents to apply the fix, add a regression test, and verify against clean-code conventions. Use when the user says "fix this bug", "fix and ship", "debug…
Skill Claude CodeCodex
Disciplined six-phase debugging loop (build feedback loop → reproduce → hypothesise → instrument → fix + regression test → cleanup) for hard bugs and performance regressions. Output is a written root-cause report at .devkit/diagnose.md that /bugfix can consume to drive the actual fix. Use when the user says "diagnose…
Skill Claude CodeCodex
Orchestrates a full feature delivery pipeline (plan → code → test → review → security audit) by dispatching specialized agents in sequence and writing artifacts to .devkit/. Produces a tested, reviewed, security-audited implementation ready to commit. Use when the user says "build feature X", "implement Y", "add…
Skill Claude CodeCodex
Guided GitHub flow with the gh CLI — create a branch, auto-format changed files, write a conventional commit, then open a pull request with a generated title and body. Use when the user says "open a PR", "create a pull request", "ship this", "commit and PR", "push my changes", or finishes a feature and wants it on…
Skill Claude CodeCodex
Reviews code changes against clean-code conventions and an OWASP security checklist, with automatic security escalation when the diff touches authentication, authorization, secrets, or PII. Works on a local diff, the current branch, or a GitHub PR (number or URL). Output is CRITICAL / HIGH / MEDIUM findings with…
Skill Claude CodeCodex
Red-green-refactor test-driven development with tracer-bullet vertical slicing. Enforces one test → one implementation cycles, behavior-over-implementation tests, deep modules, and refactor only while GREEN. Use when the user says "TDD this", "red-green-refactor", "write tests first", "drive this with tests", or is…