purview-copilot-oversharing
Guidance for assessing and remediating oversharing before and during Microsoft 365 Copilot adoption, using SharePoint Advanced Management (SAM), sensitivity…
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-19 00:11
Security & auditing
7,222 results
purview-data-classification
Guidance for Microsoft Purview data classification and sensitivity labels - sensitive information types (SITs), trainable classifiers, exact data match, and…
php-route-tracer
Multi-layer data flow tracing tool for PHP Web routes to Sinks. Based on a user-specified route, trace from the handler to the final sensitive operation point, outputting layered evidence, parameter variable tracing, and controllability analysis (no vulnerability conclusions).
privacy-compliance
Multi-regulation privacy compliance navigator. Use for GDPR, CCPA, LGPD, POPIA, PIPEDA, PDPA, Privacy Act, PIPL, UK GDPR compliance assessments, DPA reviews,…
descope-auth
Integrate Descope authentication into applications. Use when implementing login, signup, passwordless auth (OTP, Magic Link, Passkeys), OAuth, SSO, or MFA.…
application-security
Secure applications against common vulnerabilities. Use when reviewing code for security, implementing security controls, or hardening applications. Covers…
sa-token-advanced
Sa-Token advanced security feature skill. Covers two-factor authentication (safe-auth secondary verification), account banning (full ban/category ban/tiered ban), impersonating others and identity switching, multi-account authentication (StpUserUtil/StpKit), global listeners (login/logout/kickout/ban/renewal events), global filters (SaServletFilter/SaReactorFilter), secret...
sa-token-api-security
Sa-Token API security defense skills. Covers API parameter signing (sa-token-sign) anti-tampering and anti-replay (timestamp+nonce+sign four-step evolution), API Key (sa-token-apikey) partial authorization and Scope control (revocable/restrictable), temporary Token (SaTempUtil embedded in the core package) short-lived link invitation.…
mitm-find-callback
Find payment callback and webhook vulnerabilities. Use when user asks about payment security, callback tampering, hash validation, or transaction manipulation.
mitm-security-audit
Comprehensive security audit of mitmproxy traffic. Use when user wants to analyze captured HTTP traffic for vulnerabilities, or mentions pentesting, security…
gdpr-compliance-scanner
Scan gdpr compliance scanner operations. Auto-activating skill for Security Advanced. Triggers on: gdpr compliance scanner, gdpr compliance scanner Part of the…
wp-woocommerce-dev
WooCommerce extension code review for HPOS compatibility, payment gateway security, cart optimization, and template overrides. Use when reviewing WooCommerce…
app-store-review
Pre-submission review for iOS apps targeting the Apple App Store. Scans your Xcode project for common rejection reasons — missing privacy strings, icon issues,…
performing-threat-hunting-with-yara-rules
Use YARA pattern-matching rules to hunt for malware, suspicious files, and indicators of compromise across filesystems and memory dumps. Covers rule authoring,…
define-security-policy
Define, review, or update SECURITY.md guidance for a repository or component. Use when the user wants to clarify what Codex Security should review, what is out…
attack-tree-construction
Build comprehensive attack trees to visualize threat paths. Use when mapping attack scenarios, identifying defense gaps, or communicating security risks to…
agent-red-teaming
Plan, execute, document, and retest authorized security assessments of AI agents and multi-agent workflows using safe adversarial cases, synthetic identities,…
gcp-review
Performs a GCP security posture review against the CIS Google Cloud Platform Foundation Benchmark v2.0.0. Auto-invoked when reviewing GCP infrastructure, IAM…
purview-agent-365-security
Guidance for securing and governing AI agents (Microsoft 365 Copilot agents, Copilot Studio agents, and Security Copilot agents) with Microsoft Purview -…
php-csrf-audit
PHP Web source code CSRF audit tool. Identifies whether state-changing interfaces are protected against CSRF, traces token generation, validation, and bypass conditions, and outputs exploitability grading, PoC, and remediation recommendations (omission is prohibited).
php-deser-audit
PHP Web source code deserialization/object injection audit tool. Identify unserialize injection points and controllable data sources, trace magic method chains, and output exploitability grading, PoC, and remediation recommendations (omission prohibited).
php-logic-audit
PHP Web business logic vulnerability auditing tool. Identifies logic flaws beyond authentication/authorization: Mass Assignment, flow bypass, race conditions, state machine defects, payment/permission timing vulnerabilities, etc., and outputs evidence chain, severity rating, PoC, and remediation recommendations (omission prohibited).
implementing-tls
Configure TLS certificates and encryption for secure communications. Use when setting up HTTPS, securing service-to-service connections, implementing mutual…
circleci-cli
Day-to-day CircleCI from the terminal with the circleci CLI — authenticate, validate config before you commit, watch the run your push triggered, review…