codex
Codex skills are built for OpenAI's coding-agent workflow across the terminal, repository context, and tool-driven implementation tasks. Expect software engineering, debugging, refactoring, and research helpers that pair well with an agent editing files and running commands.
Skills compatible with codex
domain
by railwayapp/railway-skills
Add, view, or remove domains for Railway services.
cosmos-vulnerability-scanner
by trailofbits/skills
Systematically scan Cosmos SDK blockchain modules and CosmWasm smart contracts for platform-specific security vulnerabilities that can cause chain halts, consensus failures, or fund loss. This skill encodes 9 critical vulnerability patterns unique to Cosmos-based chains.
widgets-ui
by inference-shell/skills
Declarative UI from JSON via ui.inference.sh .
testing-handbook-generator
by trailofbits/skills
Generate and maintain Claude Code skills from the Trail of Bits Testing Handbook.
constant-time-analysis
by trailofbits/skills
Analyze cryptographic code to detect operations that leak secret data through execution timing variations.
ghost-scan-code
by ghostsecurity/skills
You find security issues in a repository. This skill plans which vulnerability vectors to scan, then executes those scans against each project.
algorand-vulnerability-scanner
by trailofbits/skills
Systematically scan Algorand smart contracts (TEAL and PyTeal) for platform-specific security vulnerabilities documented in Trail of Bits' "Not So Smart Contracts" database. This skill encodes 11 critical vulnerability patterns unique to Algorand's transaction model.
marimo-notebook
by marimo-team/skills
marimo uses Python to create notebooks, unlike Jupyter which uses JSON. Here's an example notebook:
day5-fetch-and-digest
by ai-native-camp/camp-1
Source details, install context, and public review data are available on the full page.
workflow
by vercel/workflow
Source details, install context, and public review data are available on the full page.
brand-storytelling
by refoundai/lenny-skills
Help the user craft compelling narratives that make their brand memorable using techniques from 30 product leaders and storytelling experts.
address-sanitizer
by trailofbits/skills
AddressSanitizer (ASan) is a widely adopted memory error detection tool used extensively during software testing, particularly fuzzing. It helps detect memory corruption bugs that might otherwise go unnoticed, such as buffer overflows, use-after-free errors, and other memory safety violations.
prompt-engineer
by jeffallan/claude-skills
Expert prompt engineer specializing in designing, optimizing, and evaluating prompts that maximize LLM performance across diverse use cases.
building-admin-dashboard-customizations
by medusajs/medusa-agent-skills
Build custom UI extensions for the Medusa Admin dashboard using the Admin SDK and Medusa UI components.
interpreting-culture-index
by trailofbits/skills
Source details, install context, and public review data are available on the full page.
web-search
by inference-shell/skills
Search the web and extract content via inference.sh CLI.
fuzzing-dictionary
by trailofbits/skills
A fuzzing dictionary provides domain-specific tokens to guide the fuzzer toward interesting inputs. Instead of purely random mutations, the fuzzer incorporates known keywords, magic numbers, protocol commands, and format-specific strings that are more likely to reach deeper code paths in parsers, protocol handlers,...
web-search-plus
by robbyczgw-cla/web-search-plus
Stop choosing search providers. Let the skill do it for you.
atheris
by trailofbits/skills
Atheris is a coverage-guided Python fuzzer built on libFuzzer. It enables fuzzing of both pure Python code and Python C extensions with integrated AddressSanitizer support for detecting memory corruption issues.
sre-engineer
by jeffallan/claude-skills
Source details, install context, and public review data are available on the full page.
constant-time-testing
by trailofbits/skills
Timing attacks exploit variations in execution time to extract secret information from cryptographic implementations. Unlike cryptanalysis that targets theoretical weaknesses, timing attacks leverage implementation flaws - and they can affect any cryptographic code.
swift-concurrency-pro
by twostraws/swift-concurrency-agent-skill
Review Swift concurrency code for correctness, modern API usage, and adherence to project conventions. Report only genuine problems - do not nitpick or invent issues.
us-stock-analysis
by tradermonty/claude-trading-skills
Perform comprehensive analysis of US stocks covering fundamental analysis (financials, business quality, valuation), technical analysis (indicators, trends, patterns), peer comparisons, and generate detailed investment reports. Fetch real-time market data via web search tools and apply structured analytical frameworks.
ossfuzz
by trailofbits/skills
OSS-Fuzz is an open-source project developed by Google that provides free distributed infrastructure for continuous fuzz testing. It streamlines the fuzzing process and facilitates simpler modifications. While only select projects are accepted into OSS-Fuzz, the project's core is open-source, allowing anyone to host...