“Security scanning”

Runs a full Mimir security scan on the project to detect SAST vulnerabilities (Semgrep), dependency/IaC issues (Trivy), exposed secrets (Gitleaks), and prompt…

Deploy Aqua Security's Trivy scanner to detect vulnerabilities, misconfigurations, secrets, and license issues in container images across CI/CD pipelines and…

Scan a website for vulnerabilities: OWASP Top 10, CVEs, SSL, headers - with plain-English fixes

Investigate and resolve existing Orbyn security findings, record evidence and add preventive checks without starting a security scan.

Honeypot detection & token risk scan for ERC-20s.

Security scanning and threat detection for AI agents

Configure GitHub Advanced Security with CodeQL to perform automated static analysis and vulnerability detection across repositories at enterprise scale.

Scan installed plugins and skills for security risks including malicious code AND malicious natural language instructions.

Runs security audits on codebases — full scans, diff reviews, threat models, vulnerability triage, remediation guidance, and finding tracking.

Deep security scan for OWASP Top 10 vulnerabilities

Use when security verification is needed - pre-commit security checks, vulnerability scanning, STRIDE threat analysis.

codex-security:finding-discovery - Use when Codex is already in the finding-discovery phase of a security scan or the user explicitly asks to discover…

Scan GitHub-hosted AI skills for vulnerabilities: prompt injection, malware, OWASP LLM Top 10.

Free front-end security check for any website: a grade plus the secrets and keys it exposes.

Scannd

scannd.comOfficial

Trigger security scans and read reports/vulnerabilities via the hosted Scannd API.

codex-security:validation - Use when Codex is already in the validation phase of a security scan or the user explicitly asks to determine whether one or more…

Fetch all of the repository's open GitHub security alerts (Dependabot, code scanning, secret scanning, and repository security advisories), trace each to its…

Full end-to-end PR pipeline — validate → necessity-check → lint (loop) → test (loop) → security scan → doc-check → changelog → create-pr → monitor reviews…

MAVERICK Tooling Agent — Expert CLI usage for security scanning tools: nmap, nuclei, sqlmap, ffuf, katana, naabu, subfinder, semgrep, ast-grep, gitleaks…

codex-security:threat-model - Use when Codex is already in the threat-modeling phase of a security scan, the user explicitly invokes $threat-model, or the…

Scans a codebase for security vulnerabilities using CodeQL's interprocedural data flow and taint tracking analysis.

Scans Cosmos SDK blockchain modules and CosmWasm contracts for consensus-critical vulnerabilities — chain halts, fund loss, state divergence.

codex-security:attack-path-analysis - Use when Codex is already in the attack-path-analysis phase of a security scan or the user explicitly asks to trace a…

Scan any agent skill for security risks before you install or use it.