AutoGineer

Agent Skills

Trusted skills for AI agents from official vendors and established maintainers. Every skill is attributed to its author, scanned, and comes with install steps for your AI tool.

Connect your AI tool (MCP)

Results

213 skills

  • Deep Security Scan

    OpenAIOfficial

    Use when the user asks for a deep, exhaustive, multi-pass, or variance-reducing repository-wide or scoped-path Codex Security scan. Run repeated complete independent Standard scans with the Codex Security deep-scan tool, which aggregates their validated findings and prepares the canonical artifacts; then complete the same scan once. Do not use for PRs, commits, branch diffs, or working-tree diffs.

    SecurityClaude CodeClaude appsOpenAI Codex+14 more
    Link-onlyGitHub stars of the source repository7.8k

  • Verify Fix

    OpenAIOfficial

    Use only when the user explicitly requests verification that a security fix remediates a reported vulnerability. Do not invoke automatically while implementing fixes, reviewing ordinary code changes, or running tests. Do not use for non-security fixes, candidate finding validation, or full repository scans.

    SecurityClaude CodeClaude appsOpenAI Codex+14 more
    Link-onlyGitHub stars of the source repository7.8k

  • Security Diff Scan

    OpenAIOfficial

    Review a pull request, commit, branch diff, or working-tree patch for security vulnerabilities.

    SecurityClaude CodeClaude appsOpenAI Codex+14 more
    Link-onlyGitHub stars of the source repository7.8k

  • Validation

    OpenAIOfficial

    Use when Codex is already in the validation phase of a security scan or the user explicitly asks to determine whether one or more candidate security findings are valid. Do not use as the primary trigger for full PR, commit, branch, patch, or repository scans.

    SecurityClaude CodeClaude appsOpenAI Codex+14 more
    Link-onlyGitHub stars of the source repository7.8k

  • Twilio Security Hardening

    OpenAIOfficial

    Secure Twilio applications against common attacks. Covers credential management (API keys vs auth tokens), request validation (webhook signature verification), PCI DSS compliance, HIPAA account requirements, SMS pumping prevention, geo-permissions, and account isolation patterns. Use this skill when developers are building or deploying Twilio apps.

    SecurityClaude CodeClaude appsOpenAI Codex+14 more
    Link-onlyGitHub stars of the source repository7.8k

  • Triage Finding

    OpenAIOfficial

    Triage supplied or imported security findings against a repository using its security policy and static code evidence. Accepts scanner reports, advisories, GitHub findings, and Jira or Linear tickets. Do not use for discovery, duplicate triage, runtime validation, or fixes.

    SecurityClaude CodeClaude appsOpenAI Codex+14 more
    Link-onlyGitHub stars of the source repository7.8k

  • Finding Discovery

    OpenAIOfficial

    Use when Codex is already in the finding-discovery phase of a security scan or the user explicitly asks to discover candidate security findings in a repository or code change. Do not use as the primary trigger for full PR, commit, branch, patch, or repository scans.

    SecurityClaude CodeClaude appsOpenAI Codex+14 more
    Link-onlyGitHub stars of the source repository7.8k

  • Twilio Security Compliance Hipaa

    OpenAIOfficial

    Configure Twilio accounts for HIPAA compliance. Covers BAA requirements, HIPAA Project designation (self-service and support), eligible services list, per-product requirements (Voice, SMS, ConversationRelay, Conversation Intelligence, Flex, Verify), message redaction, and what is NOT eligible. Use this skill when developers are building healthcare workflows on Twilio.

    SecurityClaude CodeClaude appsOpenAI Codex+14 more
    Link-onlyGitHub stars of the source repository7.8k

  • Propose Security Hardening

    OpenAIOfficial

    Develop evidence-backed structural and architectural security hardening proposals from vulnerability disclosures, supplied findings, incident or assessment documents, source code, or a completed Codex Security scan. Use when a user asks for systemic improvements, alternatives beyond per-finding patches, before-and-after security architecture views, engineering tradeoff analysis, or an implementation-ready plan for a selected hardening option. Also use automatically after a Codex Security scan with reportable findings when the top-level scan workflow requests final-report hardening guidance.

    SecurityClaude CodeClaude appsOpenAI Codex+14 more
    Link-onlyGitHub stars of the source repository7.8k

  • Threat Model

    OpenAIOfficial

    Use when Codex is already in the threat-modeling phase of a security scan, the user explicitly invokes $threat-model, or the user explicitly asks to create, update, or persist a repository threat model. Do not use as the primary trigger for full PR, commit, branch, patch, or repository scans.

    SecurityClaude CodeClaude appsOpenAI Codex+14 more
    Link-onlyGitHub stars of the source repository7.8k

  • Fix Finding

    OpenAIOfficial

    Use only when the user explicitly asks to fix and verify a validated or plausible security vulnerability. Do not use for ordinary bug fixes, correctness or design review findings, general validation, or full PR, commit, branch, patch, or repository scans.

    SecurityClaude CodeClaude appsOpenAI Codex+14 more
    Link-onlyGitHub stars of the source repository7.8k

  • Define Security Policy

    OpenAIOfficial

    Define, review, or update SECURITY.md guidance for a repository or component. Use when the user wants to clarify what Codex Security should review, what is out of scope, which security properties must hold, or whether existing guidance still matches the code.

    SecurityClaude CodeClaude appsOpenAI Codex+14 more
    Link-onlyGitHub stars of the source repository7.8k

  • Vulnerability Writeup

    OpenAIOfficial

    Turn vulnerability notes, disclosure reports, PoCs, source code, or Codex Security findings into self-contained, sceptically validated, natural-sounding vulnerability reports. Use for one vulnerability or a disclosure campaign; a Codex Security scan is optional.

    SecurityClaude CodeClaude appsOpenAI Codex+14 more
    Link-onlyGitHub stars of the source repository7.8k

  • Doca Argus

    NVIDIAOfficial

    Operational guidance for deploying and managing the DOCA Argus Service container for runtime security on NVIDIA BlueField DPUs.

    SecurityClaude CodeClaude appsOpenAI Codex+14 more
    Apache-2.0Medium riskGitHub stars of the source repository3.9k

  • Nemotron Policy Generator

    NVIDIAOfficial

    Generates BYO custom safety policies for NVIDIA Nemotron content-safety guardrails — Nemotron-Content-Safety-Reasoning-4B (text) and multimodal Nemotron-3-Content-Safety. Produces a Markdown policy, JSON taxonomy, and drop-in inference prompts. Maps rough words or an existing policy to V2 categories, adding custom categories or topic-following rules.

    SecurityClaude CodeClaude appsOpenAI Codex+14 more
    Link-onlyMedium riskGitHub stars of the source repository3.9k

  • Golang Security

    Samuel Berthe· Community

    A comprehensive security framework for Go, providing best practices, threat modeling, and automated auditing tools.

    SecurityClaude CodeClaude appsOpenAI Codex+14 more
    MITMedium riskGitHub stars of the source repository3.8k

  • Credentials

    Google DeepMindOfficial

    Standardized protocol for securely verifying and managing API keys and credentials within an agent environment.

    SecurityClaude CodeClaude appsOpenAI Codex+14 more
    Apache-2.0GitHub stars of the source repository3.4k

  • Pentesting With AWS Security Agent

    AWSOfficial

    Automated workflow for executing and monitoring AWS Security Agent penetration tests against live web applications.

    SecurityClaude CodeClaude appsOpenAI Codex+14 more
    Apache-2.0GitHub stars of the source repository3.4k

  • Diff Scanning With AWS Security Agent

    AWSOfficial

    Perform targeted security scans on code changes using AWS Security Agent.

    SecurityClaude CodeClaude appsOpenAI Codex+14 more
    Apache-2.0GitHub stars of the source repository3.4k

  • Waf

    AWSOfficial

    A routing skill for configuring AWS WAF to protect web applications and APIs from layer 7 threats.

    SecurityClaude CodeClaude appsOpenAI Codex+14 more
    Apache-2.0GitHub stars of the source repository3.4k

  • Threat Modeling With AWS Security Agent

    AWSOfficial

    Automated threat modeling for AWS environments using STRIDE analysis on design and requirement documentation.

    SecurityClaude CodeClaude appsOpenAI Codex+14 more
    Apache-2.0GitHub stars of the source repository3.4k

  • Remediating With AWS Security Agent

    AWSOfficial

    Automate the discovery, triage, and remediation of AWS Security Agent penetration test and code review findings.

    SecurityClaude CodeClaude appsOpenAI Codex+14 more
    Apache-2.0GitHub stars of the source repository3.4k

  • Entra Agent Id

    MicrosoftOfficial

    Manage OAuth2-capable AI agent identities using the Microsoft Entra Agent ID preview via Microsoft Graph.

    SecurityClaude CodeClaude appsOpenAI Codex+14 more
    MITLow riskGitHub stars of the source repository3.2k

  • Azure Compliance

    MicrosoftOfficial

    Perform Azure compliance scans and security audits using azqr and Key Vault monitoring.

    SecurityClaude CodeClaude appsOpenAI Codex+14 more
    MITLow riskGitHub stars of the source repository3.2k