security-controls

Links

• github.com/mjcramerz/codex-home
• home/marketplaces/codex-home/plugins/cache/codex-home/security-controls/local/plugin.json (manifest)

Skills · 10

appsec-hardening

Apply application security hardening controls such as input validation, authn/authz checks, safe subprocess patterns, security headers, and abuse-rate defenses. Use when the user asks to harden code paths, close security gaps, or implement secure defaults.

bws-local

Use this skill for install, configure, and rotate Bitwarden Secrets Manager CLI (bws) for local Debian systems with keyring-backed secret storage. Use when the user asks for local BWS lifecycle operations outside CI/CD.

secops-aide

Configure AIDE file-integrity monitoring rules, baselines, and scheduled verification runs. Use when the user asks for host file integrity monitoring or tamper-detection setup.

secops-auditd

Configure auditd rules and log capture policies with safe performance tradeoffs and compliance alignment. Use when the user asks for Linux auditing policy design or audit event tuning.

secops-crowdsec

Configure CrowdSec collections, parser sources, and bouncer integration with safe enforcement defaults. Use when the user asks for CrowdSec detection or remediation setup.

secops-supply-chain

Harden software supply-chain controls through dependency pinning, lockfile discipline, SBOM generation, and CI enforcement. Use when the user asks about dependency risk, provenance, or package security posture.

secops-usbguard

Configure USBGuard device authorization policies and rule sets for USB attack surface reduction. Use when the user asks for USB allowlist/denylist policy setup.

security-best-practices

Perform language and framework specific security best-practice reviews and suggest improvements. Trigger only when the user explicitly requests security best practices guidance, a security review/report, or secure-by-default coding help. Trigger only for supported languages (python, javascript/type…

security-ownership-map

Analyze git repositories to build a security ownership topology (people-to-file), compute bus factor and sensitive-code ownership, and export CSV/JSON for graph databases and visualization. Trigger only when the user explicitly wants a security-oriented ownership or bus-factor analysis grounded in…

security-threat-model

Use this skill for repository-grounded threat modeling that enumerates trust boundaries, assets, attacker capabilities, abuse paths, and mitigations, and writes a concise Markdown threat model. Trigger only when the user explicitly asks to threat model a codebase or path, enumerate threats/abuse pa…

Descriptions come from the frontmatter of each SKILL.md, punctuation lightly normalized.

Category

Other. Assigned by this directory. Agent Plugins 1.0.0 has no category field, so no manifest declares one.

Keywords

security · controls · appsec · hardening · bws · local · secops · aide

Related by publisher and keywords

• key-managermjcramerz

  Repository-specific workflow for key-manager Go code and SSH, GPG, PQC, TLS, filesystem, and subprocess security boundaries.

• security-labsmjcramerz

  Use this plugin for cybersecurity lab workflows for purple-team validation, mobile security, NetHunter research, and defensive security operations.

• web-browser-linuxmjcramerz

  Use this plugin for linux browser hardening and browser-specific desktop workflows.

• adobe-acrobatmjcramerz

  Use this plugin for adobe Acrobat workflows for PDF reading, forms, signing, reviews, and document handoffs.

• adobe-expressmjcramerz

  Use this plugin for adobe Express workflows for quick visual design, social assets, and campaign-ready exports.

• adobe-photoshopmjcramerz

  Use this plugin for adobe Photoshop workflows for image retouching, compositing, and export handoffs.