code-review
01Skill Claude CodeCodex
Analyze pull requests and diffs for bugs, security vulnerabilities, performance issues, style violations, and test coverage gaps — producing structured, actionable feedback.
An AI agent for your terminal, built on signal theory: every output is signal, not noise. Codes, runs multi-step work with subagents, and works with any model, including your Claude or ChatGPT subscription.
Skill Claude CodeCodex
Analyze pull requests and diffs for bugs, security vulnerabilities, performance issues, style violations, and test coverage gaps — producing structured, actionable feedback.
Skill Claude CodeCodex
Draft blog posts, social media content, email campaigns, and marketing copy.
Skill Claude CodeCodex
Triage incoming support tickets, draft responses, detect customer sentiment, suggest knowledge base articles, and track resolution metrics.
Skill Claude CodeCodex
Generate a morning business briefing with weather, calendar, news, and task priorities.
Skill Claude CodeCodex
Triage inbox, flag urgent emails, summarize threads, and draft replies.
Skill Claude CodeCodex
Research attendees, prepare talking points, and summarize previous interactions before meetings.
Skill Claude CodeCodex
Conduct deep, multi-source research on technologies, companies, markets, and topics — synthesizing findings into structured reports with citations and actionable insights.
Skill Claude CodeCodex
Monitor sales pipeline, track deals, send follow-up reminders, and forecast revenue.
Skill Claude CodeCodex
Diagnose broken, failing, incorrect, flaky, or unexpectedly slow software. Use whenever a user reports a bug, regression, crash, hang, visual defect, or unexplained behavior, even if they ask directly for a fix.
Skill Claude CodeCodex
Decompose a large task into DISJOINT file-owned workstreams, fan out isolated full-power peers, collect structured reports, run ONE authoritative gate, and commit when green — the collision-free, self-verifying multi-agent flow. Ultra-gated.
Skill Claude CodeCodex
Build, debug, review, or polish user interfaces with responsive layout, accessibility, and pixel-level visual verification. Use for frontend components, browser UI, terminal UI, resize defects, visual regressions, and interaction problems.
Skill Claude CodeCodex
Implement a requested feature or change completely in an existing codebase. Use for multi-file coding tasks, specifications, acceptance criteria, and requests to build or modify behavior rather than merely explain it.
Skill Claude CodeCodex
Recover the work a fleet wave dropped when two parallel nodes edited the same file — read each claimant's version out of its worktree, reconcile them into one correct file, and re-run the authoritative gate instead of re-running the wave.
Skill Claude CodeCodex
Full-scope penetration testing — reconnaissance, vulnerability discovery, exploitation, post-exploitation, and reporting against authorized targets. Covers network, web app, API, and host pentesting.
Skill Claude CodeCodex
Review code, configuration, permissions, authentication, data handling, and dependencies for exploitable security weaknesses. Use for security reviews, threat analysis, trust boundaries, secrets, authorization, sandboxing, and dangerous command handling.
Skill Claude CodeCodex
Create or improve reusable OSA skills with progressive disclosure, precise selection descriptions, supporting resources, and realistic evaluations. Use when users ask to create, package, test, optimize, or maintain a skill or skill library.
Skill Claude CodeCodex
Build features and bug fixes test first using a strict red, green, refactor loop. Use for TDD requests, regression tests, behavior changes with clear acceptance criteria, and risky logic that benefits from executable specification.
Skill Claude CodeCodex
Tool-arsenal validation and risk gating for offensive engagements: risk-tier classification of tools (safe/active/intrusive/credential/dangerous), approval gates where intrusive tools are inert until approved (approve-once-then-free or pre-authorized allowlists), fail-safe denial for unattended runs, loud audited…
Skill Claude CodeCodex
Ground-truth vulnerability-hunting benchmarks: challenge definitions with known-vulnerable targets, ground-truth vulnerability records with match keywords and point values, precision/recall/F1 scoring of discovered findings against ground truth, time-to-finding metrics, decoy clean samples to measure false-positive…
Skill Claude CodeCodex
Digital forensics and incident response workflow: read-only evidence acquisition with SHA-256 integrity records, typed acquisition outcomes (collected/cancelled/permission-denied/failed), containment previews with digests and approval receipts, rollback planning before execution, and artifact redaction at collection…
Skill Claude CodeCodex
Evidence management for security engagements: chain-of-custody records with SHA-256 integrity, the provenance-strict verification gate (a finding is only 'verified' when backed by real tool output, never prose), credential redaction for any outward-facing surface, CVSS-to-severity scoring, and authorized retest…
Skill Claude CodeCodex
Honeytoken design and deployment for detecting intrusion attempts: token kinds (opaque, API-key-shaped, credential-shaped, beacon), lifecycle management (create, activate, rotate, revoke, cleanup), HMAC-signed trigger verification with nonce and replay protection, environment-scoped authorization, audit trails for…
Skill Claude CodeCodex
Active Directory attack methodology for internal network red team engagements. Covers reconnaissance (BloodHound, PowerView, ADExplorer), credential abuse (Kerberoasting, ASREProasting, NTLM relay, LLMNR/NBT-NS poisoning), privilege escalation (ACL abuse, GPO abuse, unconstrained/constrained delegation), lateral…
Skill Claude CodeCodex
Comprehensive red team operations methodology covering full engagement lifecycle from planning through reporting. Addresses engagement scoping and rules of engagement negotiation, multi-tier C2 infrastructure design with redirectors and domain fronting, malleable traffic profiles and beacon tradecraft, OPSEC…
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: