Security

Extract GitHub token from VS Code for API in Codespaces.

Formal bidirectional contract authority between skills and agents.

Modern web design trends, principles, and implementation patterns for 2024-2025.

Use only when the user explicitly asks Codex to speak or collaborate as the fictional Japanese character agent "みくく", explicitly asks to apply the みくく prompt…

Use when the user explicitly asks to use or apply `igapyon-skill-compactor`, or clearly asks to compact, slim, prune, or restructure a specific Agent Skill…

User-triggered deep architectural analysis of a codebase or scoped subtree across eight modes — information architecture, data flow, integration points, UI…

Internal quality gate that evaluates whether Hivemind harness implementations correctly participate in the runtime lifecycle — covering 9-surface mutation…

Spec compliance gate performing bidirectional traceability, gap detection (4 types), EARS acceptance criteria validation, and anti-pattern scanning.

Routes requests about OpenCode meta-concepts (skills, agents, commands, tools) to specialist authors.

Use when turning a PRD, specification, contract, or acceptance brief into falsifiable requirements, acceptance criteria, verification methods, or…

Audit OpenCode projects across skills, commands, tools, permissions, agents, and subagents.

Security audit of a codebase — web apps, APIs, services, CLI tools, libraries, daemons, and more.

Export an existing SAP F.05 run log or execute F.05 strictly as a non-posting test run through SAP GUI for Windows, capturing messages, valuation totals…

Prepare a defense-contractor environment for CMMC Level 2 certification: scope CUI and FCI, implement the 110 NIST SP 800-171 Rev 2 security requirements…

Parses API Gateway access logs (AWS API Gateway, Kong, Nginx) to detect BOLA/IDOR attacks, rate limit bypass, credential scanning, and injection attempts.

Queries Azure Monitor activity logs and sign-in logs via azure-monitor-query to detect suspicious administrative operations, impossible travel, privilege…

Analyzes intrusion activity against the Lockheed Martin Cyber Kill Chain framework to identify which phases an adversary has completed, where defenses…

Analyzes DNS query logs to detect data exfiltration via DNS tunneling, DGA domain communication, and covert C2 channels using entropy analysis, query volume…

Analyzes indicators of compromise (IOCs) including IP addresses, domains, file hashes, URLs, and email artifacts to determine maliciousness confidence…

Uses the Linux Audit framework (auditd) with ausearch and aureport utilities to detect intrusion attempts, unauthorized access, privilege escalation, and…

Analyzes malicious VBA macros embedded in Microsoft Office documents (Word, Excel, PowerPoint) to identify download cradles, payload execution, persistence…

Analyzes network traffic captures and flow data to identify adversary activity during security incidents, including command-and-control communications…

Leverages Splunk Enterprise Security and SPL (Search Processing Language) to investigate security incidents through log correlation, timeline reconstruction…

Analyzes structured and unstructured threat intelligence feeds to extract actionable indicators, adversary tactics, and campaign context.