skill-tagchars
121Skill Claude CodeCodex
Fetches the weather forecast for a city. Use this tool when the user asks about weather..
573 tagged devsecops, measured the same way as everything else here.
Browse within: cybersecurity 219ai-security 209appsec 93ai-hacking 58ai-pentesting 58DAST 57compliance 57bug-bounty 51CISO 48blue-team 48cowork 47data-exfiltration 47malware-detection 47Prompt Injection 42
Skill Claude CodeCodex
Fetches the weather forecast for a city. Use this tool when the user asks about weather..
Skill Claude CodeCodex
A helpful skill that reports the current weather for a city.
Skill Claude CodeCodex
Full GAUNTLEX environment health check — model reachable, ChromaDB writable, AVF fixtures pass, no unexpected outbound network (air-gap verification). Use before first run or when debugging failures.
Skill Claude CodeCodex
Run a full GAUNTLEX adversarial session on a spec file or GitHub issue URL. Invokes the Gauntlex (Builder + Breaker concurrent) and outputs an Adversarial Resilience Score (ARS) with a Resilience Report.
Skill Claude CodeCodex
Dry-run GAUNTLEX validation — parses the spec, resolves policy playbooks, checks model availability, and runs the AVF golden fixture gate. No attacks are fired. Exit 1 if any check fails.
Skill Claude CodeCodex
Act as a senior GitHub platform architect, open-source maintainer, DevSecOps engineer, and repository governance specialist. Produce repository systems that are understandable, maintainable, secure by default, automation-friendly, and practical for real teams.
Skill Claude CodeCodex
Deep white-box OSWE-style web application security audit. Invoke ONLY via the explicit /oswe:audit command. Detects stack and attack surface, traces source-to-sink vulnerabilities, chains them toward unauthenticated RCE under a proof contract, and writes a dated report to .oswe/reports/.
Skill Claude CodeCodex
Audit a private git repository for secrets and personally-identifying info before it goes public, then carry out the cleanup. Use this whenever the user wants to open-source a repo, flip a GitHub repo from private to public, "clean up before going public," or asks whether a repo is safe to share externally — even if…
cyanheads/osv-advisory-mcp-server
Skill Claude CodeCodex
Scaffold a new MCP tool definition. Use when the user asks to add a tool, create a new tool, or implement a new capability for the server.
cyanheads/osv-advisory-mcp-server
Skill Claude CodeCodex
Design the tool surface, resources, and service layer for a new MCP server. Use when starting a new server, planning a major feature expansion, or when the user describes a domain/API they want to expose via MCP. Produces a design doc at docs/design.md that drives implementation.
cyanheads/osv-advisory-mcp-server
Skill Claude CodeCodex
Ship a release end-to-end across every registry the project targets (npm, MCP Registry, GitHub Releases for .mcpb bundles, GHCR). Runs the final verification gate, pushes commits and tags, then publishes to each applicable destination. Assumes git wrapup (version bumps, changelog, commit, annotated tag) is already…