privacy-api-design
Design privacy API patterns including data subject API for DSAR endpoints, consent API for preference management, deletion API with cascading delete…
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-21 00:11
Security & auditing
7,270 results
privacy-law-gap-analysis
Guides conducting privacy law gap analysis for market entry into new jurisdictions. Covers target jurisdiction assessment, existing compliance mapping,…
privacy-record-linkage
Implement privacy-preserving record linkage across datasets using Bloom filter encoding, secure hash matching, threshold tuning for precision and recall, and…
ropa-tool-integration
Integrates Records of Processing Activities with privacy management platforms including OneTrust, TrustArc, Collibra, and DataGrail. Covers API-based…
secure-data-destruction
Implements NIST SP 800-88 Rev. 1 media sanitization procedures including Clear, Purge, and Destroy methods for all media types. Covers certificate of…
state-law-tracker
Tracks and monitors US state privacy legislation across all 50 states, DC, and territories. Covers enacted comprehensive privacy laws (California CCPA/CPRA,…
telehealth-privacy
Implements telehealth privacy compliance covering HIPAA requirements for virtual care, state licensing and recording consent laws, platform security with BAA…
authentication-flow-rules
OAuth 2.1 compliant authentication flows (MANDATORY Q2 2026). PKCE required for ALL clients, Implicit Flow removed, modern token security.
threat-model
Use when Codex is already in the threat-modeling phase of a security scan, the user explicitly invokes $threat-model, or the user explicitly asks to create,…
python-supply-chain
Hardens a Python repository's supply chain — Dependabot update automation, pip-audit vulnerability scanning, secret scanning and push protection, CodeQL,…
bcm-disaster-recovery-specialist
Guides security-focused business continuity and disaster recovery—BIA for critical security and IT services, RTO/RPO for identity and security tooling,…
chief-information-security-officer
Guides executive security leadership—security program strategy and operating model, risk appetite and board or audit-committee reporting, KRIs and leadership…
cyber-diligence-governance
Guides cyber due diligence and governance—M&A/investment diligence, vendor and third-party assessments, questionnaire and evidence review, control maturity and…
iam-specialist
Guides identity and access management—workforce and machine identity lifecycle, RBAC/ABAC/PBAC entitlement design, access reviews and recertification,…
incident-responder
Guides CSIRT-style security incident response—declaring incidents, scoping and severity, timeline reconstruction, evidence preservation,…
information-systems-security-officer-classified-specialist
Guides Information Systems Security Officer (ISSO) work for classified systems and enclaves—system security plan (SSP), control status, continuous monitoring,…
privacy-research-engineer-safeguards
Guides privacy research engineering for safeguards—PII and sensitive-data detection research, redaction and de-identification evals, memorization and…
software-assurance-formal-methods-specialist
Software assurance and formal methods engineering—assurance cases (GSN/CAE), safety and security claims with evidence, requirements-to-verification…
threat-hunter
Guides proactive threat hunting for advanced SOC—hypothesis-driven hunt campaigns, advanced SIEM/query workflows, baseline and anomaly analysis, MITRE…
vendor-cyber-risk-analyst
Guides third-party and vendor cyber risk—TPRM intake and tiering, security questionnaire analysis and scoring, evidence and attestation review (SOC 2, ISO…
security-scanning-security-dependencies
You are a security expert specializing in dependency vulnerability analysis, SBOM generation, and supply chain security. Scan project dependencies across…
privacy-consent-preference-center-review
Design and audit privacy consent and preference centers covering consent categories, communication preferences, cookies, tracking, email, push, SMS, AI data…
tenzir-udm
Answer questions about Google SecOps / Chronicle UDM (Unified Data Model) message/record schemas, event and entity modeling, field paths, enums, normalization…
openiddict-authorization
Master OAuth 2.0 authorization patterns with OpenIddict and ABP Framework including permission-based authorization, role-based access control, custom claims,…