INNP - AI-native security testing platform with agent orchestration, C2 framework, MinerU knowledge base, and MCP integration
Skill Claude CodeCodex
Helps users discover and install agent skills when they ask questions like "how do I do X", "find a skill for X", "is there a skill that can...", or express interest in extending capabilities. This skill should be used when the user is looking for functionality that might exist as an installable skill.
Skill Claude CodeCodex
Bundle skill for authorized API contract and trust-boundary review. Use when requests involve OpenAPI or Swagger specs, JSON APIs, schema drift, auth declarations, token handling, TLS assumptions, or dependency-driven API risk and Codex should coordinate the relevant review skills.
Skill Claude CodeCodex
A security-testing skill for application programming interfaces, the endpoints software uses to exchange data and actions.
Skill Claude CodeCodex
A guide for reviewing login, logout, password recovery, multi-factor authentication, cookies, tokens, permissions, and cross-site request protections.
Skill Claude CodeCodex
A security-testing guide for business-logic flaws, which are mistakes in how an application’s rules and process steps are designed.
Skill Claude CodeCodex
A cloud-security audit guide for checking the safety of AWS, Azure, and Google Cloud environments. It covers access rights, networks, data protection, compliance, and audit logs.
Skill Claude CodeCodex
A container-security testing guide for Docker and Kubernetes, technologies used to package and run applications. It covers image contents, running-container settings, and Kubernetes permissions and network rules.
Skill Claude CodeCodex
A security-testing guide for CSRF, or cross-site request forgery, where a malicious site tricks a logged-in browser into sending unwanted actions to another site.
Skill Claude CodeCodex
Bundle skill for CTF binary triage and solve routing. Use when the prompt mentions ELF, nc services, memory corruption, WASM reversing, native binaries, or uncertain binary challenge direction and Codex should coordinate the core CTF binary skills before deeper specialization.
Skill Claude CodeCodex
A general workflow for solving CTF challenges, which are security puzzles that award a hidden flag when solved. It first sorts a challenge into Web, Crypto, Pwn, Reverse, Forensics, or Misc categories.
Skill Claude CodeCodex
An example security-testing skill package with instructions, scripts, reference files, and assets, demonstrated through Eino and HTTP interfaces.
Skill Claude CodeCodex
A code-review guide for checking package versions, lock files, container images, build scripts, and where software dependencies come from.
Skill Claude CodeCodex
A guide to testing deserialization vulnerabilities, which can occur when software turns untrusted saved data back into objects.
Skill Claude CodeCodex
A first-pass guide for analysing ELF programs, the executable format commonly used on Linux, in capture-the-flag exploitation challenges.
Skill Claude CodeCodex
A guide for testing whether a website’s file-upload feature safely checks file names, contents, types, sizes, and storage paths.
Skill Claude CodeCodex
Bundle skill for digital forensics and artifact-first triage. Use when requests involve PCAPs, stego, suspicious images, metadata, extracted files, or mixed forensic artifacts and Codex should coordinate the initial triage skills before deeper analysis.
Skill Claude CodeCodex
A guide to testing IDOR, a web security flaw where changing a user-supplied identifier can expose someone else’s file or record. It covers checks for horizontal access between users and vertical access to administrator resources.
Skill Claude CodeCodex
A structured process for handling security incidents, from detecting a problem through containment, cleanup, recovery, and lessons learned.
Skill Claude CodeCodex
A workflow for reviewing JWTs and other login or session tokens in CTF challenges. JWTs are signed text tokens that can carry information such as a user role or expiration time.
Skill Claude CodeCodex
A security-testing guide for LDAP injection, where unescaped user input changes a directory search or login query. LDAP is a system commonly used to store and look up users and permissions.
Skill Claude CodeCodex
A methodology for testing the security of Android and iOS mobile applications. It covers the app itself, stored and transmitted data, authentication, permissions, sessions and network communications.
Skill Claude CodeCodex
A guide for testing whether web APIs—the endpoints software uses to exchange data—handle identity, permissions, input, business rules, and errors safely.
Skill Claude CodeCodex
A review process for OpenAPI or Swagger documents, which describe how JSON-based web APIs work. It checks authentication, permissions, input fields, errors and high-impact operations against the documented contract.
Skill Claude CodeCodex
A first-pass guide for examining PCAP files, which are recorded network conversations, and network logs from capture-the-flag challenges.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: