#security
32 resources
Results
- configuring-service-meshes
Configure this skill configures service meshes like istio and linkerd for microservices.
- performing-penetration-testing
Orchestrate a penetration test by routing user intent to one or more of the 25 narrow skills in this pack.
- validating-cors-policies
Validate CORS policies for security issues and misconfigurations.
- validating-csrf-protection
Validate CSRF protection implementations for security gaps.
- babysit-pr
Babysit a GitHub pull request after creation by continuously polling review comments, CI checks/workflow runs, and mergeability state until the PR is…
- openai-docs
Provide authoritative, current guidance from OpenAI developer docs using the developers.openai.com MCP server.
- authentication-patterns
Provides auth patterns for API keys, OAuth, and token management.
- codex-issue-digest
Run a GitHub issue digest for openai/codex by feature-area labels, all areas, and configurable time windows.
- repo-audit
Security audits: Scan history for leaked secrets before deploying to production - Code review optimization: Identify hotspot files…
- generate-cve-json
Generate a CVE 5.x JSON document from an <tracker> tracking issue, ready to paste into the Vulnogram #source tab of the ASF CVE tool at…
- ci-score
Grades a repository's GitHub Actions configuration against CI best practices (the CI Score: eleven pass/fail configuration facts computed from the repo's…
- ci-speedup
Audits a repository's GitHub Actions workflows for CI optimization opportunities — missing caches, redundant setup, sleep-based readiness, long test jobs…
- skills-registry-security
Checks the third-party security audit status of a skill published to a skills registry (skills.sh) across every cached surface, decides…
- ~aod-build
Generate standardized checkpoint reports for multi-phase implementation projects.
- mantis-pipeline
The master Mantis playbook -- how to run an authorized vulnerability-discovery engagement end to end, which subagent owns each stage, which…
- update-v8-version
Update Codex's pinned v8 / rusty_v8 versions, validate the release-candidate path, and investigate failed V8 canary or artifact builds.
- slopcheck
Validate npm package references in markdown, YAML, and config files against the live npm registry before installing or using them.
- ~aod-deliver
Structured delivery retrospective for the AOD Lifecycle's Deliver stage.
- ~aod-run
Full lifecycle orchestrator that chains all 6 AOD stages (Discover, Define, Plan, Build, Deliver, Document) with disk-persisted state for session…
- code-execution-helper
Guide for using code execution capabilities to perform parallel batch processing, conditional filtering, and data aggregation.
- tachi-control-analysis
Domain knowledge for compensating controls analysis — control category definitions with detection patterns, evidence criteria with…
- tachi-infographics
Domain knowledge for threat infographic generation — infographic specification formats, template-specific section layouts (Baseball Card,…
- tachi-orchestration
Domain knowledge for the tachi orchestrator agent: input format detection, DFD classification, trust boundary notation, STRIDE-per-Element…
- tachi-risk-scoring
Domain knowledge for quantitative risk scoring — four-dimensional scoring model (CVSS 3.1, exploitability, scalability, reachability), CVSS…
- tachi-shared
Shared reference files consumed by multiple tachi agents.
- codex-bug
Diagnose GitHub bug reports in openai/codex.
- tachi-threat-reporting
Domain knowledge for narrative threat report generation — executive summary structure, architecture overview patterns, per-category…
- absolute-audit
Vulnerability and security scan (defensive, your own repo): dependency CVEs plus risky code patterns (secrets, injection, weak authz), severity x…
- absolute-upgrade
Dependency upgrades: outdated/vulnerable deps planned into semver waves (patch/minor batched, majors gated and changelog-read), applied incrementally with…
- findings-spine
Record and advance every vulnerability finding through the tool-owned mantis_findings service instead of tracking findings in prose
- path-types
Choose Rust types for operating system paths across the Codex repository.
- tachi-report-assembly
Domain knowledge for PDF security report assembly — artifact detection patterns with tier selection rules, Typst data variable contract…
