codexskills.dev

Security Audit Kit

Find the vulnerabilities before someone else does. A defensive review stack in the order a security engineer would run it: model the threats, review the code against OWASP, run static analysis and dependency, secret and container scans, test the running app within an agreed scope, and write findings up with severities a team can act on.

  • 10 skills
  • 1,235 lines of instructions
  • MIT

What's inside

Best for: Engineers and security reviewers with authorization to test the system. Start with threat-modeling and secure-code-review. Each skill loads when a request matches its description, or call one directly with its $name.

  1. Threat Modeling STRIDE threats tied to real data flows Security$threat-modeling123 lines
  2. Secure Code Review Security review of a diff, done right Security$secure-code-review112 lines
  3. OWASP Top 10 Review Find real OWASP bugs at file:line Security$owasp-top-10-review118 lines
  4. Semgrep SAST A ruleset you trust, gated on new bugs Security$semgrep-sast117 lines
  5. Dependency Scanning Triage CVEs to fixes, not alert counts Security$dependency-scanning127 lines
  6. Secret Scanning Rotate first, then purge history Security$secret-scanning134 lines
  7. Container Scanning Fix the base, not one CVE at a time Security$container-scanning129 lines
  8. Pentest Methodology Scope, exploit, document, report Security$pentest-methodology127 lines
  9. API Security Testing Prove BOLA with two tokens Security$api-security-testing111 lines
  10. Security Audit Report Findings an engineer can fix and an exec can read Security$security-audit-report137 lines
esc
Just launched

Codex Skills Pro is live

79 premium skills for Codex, each with scripts, references and an evidence report that proves the result.

Bought one by one$882.21
All 79 skills$49
94% off

That's $0.62 a skill, paid once.

Get all 79 for $49Or pick single skills from $4.99 →

Secure checkout by Creem