security first
by Roy Yuen
Free
Prevent vulnerabilities before they happen by forcing early security framing and secure-by-default design patterns.
2
33
Security & Compliance Skills for Codex CLI
Skills for security audits, static analysis, vulnerability triage, and compliance checks. Ship safer software and meet regulatory requirements faster.
318 live security & compliance skills for Codex CLI.
skill install safety gate
by Roy Yuen
Free
Automated security and compatibility firewall for installing AI agent skills and Codex/OpenClaw packages.
2
13
soc2 compliance pack
by Kaymue
Free
Get SOC2 Type II-ready in 90 days. 17 policy templates, 64 control mappings, automated AWS/GCP/GitHub evidence collection.
2
3
prompt injection auditor v2
by Kaymue
Free
Audit prompts and MCP tools for prompt injection. 47 attack patterns, OWASP LLM Top 10, generates adversarial tests. CVSS-scored.
2
3
Prompt Injection Red Team Kit
Free
Red-team your own AI agent for prompt-injection and tool-misuse vulnerabilities before it ships — then fix them. Maps your attack surface, generates a defensive test plan with the safe behavior expected for each case, and gives a prioritized mitigations list. Defensive use only.
1
2
code repair spine
by GTDataworks
Free
Generate source-safe repository audits and repair handoff bundles without mutating your code.
1
2
kubernetes manifest reviewer
by Timoranjes
Free
Professional-grade Kubernetes YAML auditor for security, API deprecations, and deployment best practices.
1
2
Ironclad — Senior Software Developer
by OnwireFlow
$9.99
Makes your coding agent work like a senior developer: exact money with no rounding errors, configurable rules, real audit trails, honest testing and review. Any stack, any country.
2
1
Agent Hooks Security and Quality Gate
Free
Adversarially audit your agent hooks before you trust them. Catches command injection, secret leakage, over-broad matchers, destructive actions, and blocking-logic mistakes in pre/post-tool-use, prompt, and stop hooks — with a PASS or REVISE verdict and severity-ranked fixes.
2
1
Accessibility Auditor (WCAG 2.2)
by rayyer
$10
Find accessibility barriers and WCAG 2.2 AA failures in web and mobile UI code — with file:line, the exact criterion, and a fix
2
15.0(1)
SKILL.md Readiness Auditor
by heyhridyansh
Free
A technical auditor for SKILL.md packages that validates structure, triggers, security, and marketplace readiness.
1
1
Production Agent Design
Free
A production-grade blueprint for designing, hardening, and shipping stable, autonomous AI agents.
1
1
agent rule compliance auditor
by Timoranjes
Free
Teaches AI coding agents to audit their own CLAUDE.md, cursor rules, and project config files for structural flaws that cause rule non-compliance. Diagnoses WHY agents ignore rules (ambiguity, contrad
1
1
Cloud & Infrastructure Config Security Gate
Free
An adversarial gate that audits cloud and infrastructure-as-code config — Terraform, Kubernetes, IAM, security groups, buckets — for the misconfigurations that cause real breaches, and returns a structured PASS/REVISE/BLOCK verdict with severities and exact fixes before anything reaches your environment.
1
1
nex us privacy multistate
by Nex AI
Free
Automated US multi-state privacy compliance engine for threshold mapping, policy generation, and DSR workflows.
5
0
nex auto sector pack
by Nex AI
Free
Automates Belgian automotive sales docs, Car-Pass workflows, and 2022 warranty compliance for garages.
5
0
fastapi repo security preflight
by Nex AI
Free
Automated security scanner for FastAPI repos to detect secrets, SQLi, insecure CORS, and unverified webhooks.
5
0
toegankelijkheid audit
by Nex AI
$7
Professional accessibility auditing for architects, balancing legal regulations with real-world usability.
4
0
security audit
by Roy Yuen
$10
Professional security audit skill for web apps and APIs with structured severity-based findings and remediation plans.
4
0
grant funder reporting
$9
Automates NGO grant reporting with strict compliance checks, budget tracking, and impact storytelling.
2
0
Security Secrets & Dependency Audit — Leak Risk, Attack Path
by Vivek K
$15
Audits a repository for exposed secrets and vulnerable dependencies with threat-model context, false-positive filtering, secret lifecycle, attack-path analysis, remediation, and a CRITICAL-EXPOSURE → CLEAN maturity verdict — without ever printing full secret values.
2
0
node0 agent
Free
Sovereign cryptographic identity (Ed25519), message signing, and P2P trust mesh for AI agents.
2
0
seo optimizer
by Jai
Free
Automated SEO optimization and Chinese Advertising Law compliance scanning for social media content.
2
0
money agent safety harness
by Elyas
$30
A 6-layer engineering containment gate for agents that move real money.
2
0
Why security & compliance skills work in Codex CLI
Each skill on this page is a SKILL.md file built for security & compliance work and confirmed to run in Codex CLI. Install one into ~/.codex/skills/, start a new session, and Codex CLI follows the workflow the creator encoded instead of improvising from a short prompt.
Listings are ranked by installs, upvotes and reviews, so what surfaces first is what other Codex CLI users actually keep. Free and paid skills compete on the same page, and every listing shows its security scan result before you download anything.