florianbuetow/codex-plugins

Comprehensive application security toolbox for Codex. 62 skills across 8 frameworks (OWASP Top 10, OWASP API Top 10, STRIDE, PASTA, LINDDUN, MITRE ATT&CK, SANS/CWE Top 25, DREAD), red team simulation with 6 attacker personas plus consolidator, and interactive security education.

69 skills · 7 agents · hooks

A collection of plugins for codex

11 skills · 10 agents

A collection of plugins for codex

8 skills · 3 agents

Run this workflow from Codex. Export Claude Code session logs as standard LLM conversation JSON and human-readable TXT. Compact sessions into resumable context files. Recap recent sessions for quick context recovery. Identify current session, export individual sessions, or batch-export all sessions for a project.

7 skills

Run this workflow from Codex. Stop hooks that terminate a Claude Code session when the agent's final message contains a kill phrase. Two scripts: single-kill (ends Claude) and double-kill (ends Claude plus the terminal shell that launched it), each bound to its own phrase. Installs at local (project) or global (user) scope; scripts require LOCAL or GLOBAL arg and exit 1 if missing. Contains-match (robust to model preambles), case-sensitivity configurable, and a kill path that walks the process tree to the owning claude (and, for double-kill, the top-most shell ancestor) and never signals pid <= 2. Install, remove, update, info, and whendone skills via a router; composes safely with existing Stop hooks.

6 skills

A collection of plugins for codex

4 skills

A collection of plugins for codex

4 skills

A collection of plugins for codex

4 skills

A collection of plugins for codex

4 skills

Run this workflow from Codex. Behavioral guardrails for Claude Code agents. Nine battle-tested rules (no-guessing, no-stalling, no-preference-asking, no-false-completion, no-skipping, no-dismissing, no-cosmetic, no-caveats, no-flagging) enforced via a Stop hook bash script. Includes analyze, install, test, and update skills for data-driven tuning.

3 skills

A collection of plugins for codex

3 skills

A collection of plugins for codex

3 skills

Session handoff and continuation for Codex. Compact conversations into structured handoff documents for task continuity, then find and resume prior handoffs with full context recovery.

3 skills

Analyze and restructure how a repository progressively discloses its documentation through root configuration files (README.md, AGENTS.md, CLAUDE.md, GEMINI.md, USER.md, TOOLS.md, BOOTSTRAP.md, DESIGN.md, NOTICE.md). Maps reference graphs, detects orphaned documents, and generates thematic book-style indexes.

3 skills

Make motion-graphics videos with Codex and plain JavaScript, no video generator: every frame is a pure function of time, Playwright renders it in headless Chromium, FFmpeg stitches the frames into an MP4, and a contact-sheet check loop catches defects before delivery. setup builds the engine and proves it with a 2-second test render; make runs intake, story beats and one storyboard still per beat for approval before writing the full scene code, then checks and renders. Subcommands: setup, make.

2 skills

Run this workflow from Codex. Analyze Claude Code session logs to generate per-project time and message reports. Breaks down usage by project and branch, groups branches under their parent project, and produces monthly + yearly markdown reports.

2 skills

Specification-driven development workflow skill. Orchestrates a spec-first discipline: frame a one-page Product Spec (problem, falsifiable bet, success criteria, evaluation) that replaces the PRD, then write behavioral specifications, derive test scenarios, plan implementation, and verify alignment across all artifacts and code. Acts as a workflow navigator with advisory quality gates between phases.

2 skills

A collection of plugins for codex

1 skill

A collection of plugins for codex

1 skill

A collection of plugins for codex

1 skill

A collection of plugins for codex

1 skill

A collection of plugins for codex

1 skill

A collection of plugins for codex

1 skill

A collection of plugins for codex

1 skill

Helper skill for the `guard` CLI (https://github.com/florianbuetow/guard), a file-permission tool that protects files from accidental modification by AI agents via immutable flags and root ownership. Composes guard commands for five intents — init, create-collection, remove-collection, clear-all, info — running registry operations directly and printing `sudo guard` commands for operations that need root.

1 skill

Intent-based task resolution. When stuck, facing ambiguity, or about to ask a clarifying question, first recover the task's underlying intent from available context - the latest prompt, earlier prompts, project goals, plans, and prior corrections - then answer low-risk questions from that intent and make intent-aligned decisions. Escalate to the user only when the ambiguity is material and cannot be resolved from context; and when neither the intent nor a safe default can be inferred at all, an escape hatch stops and names the gap rather than fabricating an answer.

1 skill

Scan a software repository for ISO 27001:2022 compliance of its software development controls (Annex A 8.4, 8.25–8.33). Produces a per-control compliance gap report covering source code access, secure SDLC, application security requirements, secure architecture, secure coding, security testing, outsourced development, environment separation, change management, and test data.

1 skill

Analyze code and architecture for unnecessary complexity, over-abstraction, and redundancy. Reports findings with severity ratings and concrete simplification suggestions without modifying code.

1 skill

Project onboarding skill that orients AI agents by gathering context from project instructions, git state, issue trackers, and build systems to produce a concise status briefing with suggested next steps.

1 skill

Produces evidence-based model routing plans: maps each task unit to the best-suited AI model (Codex, GPT, Gemini, open-weight) using a 30-category task taxonomy, decision rules, and per-unit rationale, context briefing, and failure-mode warnings.

1 skill

Build and review software engineering résumés from an evidence chain, not a template, in the manner of Richard Feynman and W. Edwards Deming. Applies the three-reader standard (parser, recruiter, engineering interviewer): every claim carries context, action, constraint, result, and ownership; every number is asked by what method; the person's contribution is separated from the system's. review judges a résumé in two phases (up to eight ranked questions, then re-score on the answers into a prediction and a fix list) and never emits an ATS score. build harvests accomplishments one at a time into a win log with provenance, writes five-part bullets, assembles a few coherent versions per role family, runs the two pre-apply tests, and sets up tracking. Subcommands: review, build.

1 skill

Run this workflow from Codex. Analyze Claude Code session logs to identify what went well, what didn't, and how to improve developer-AI collaboration. Suggests new skills, subagents, slash commands, hooks, and workflow optimizations based on actual usage patterns.

1 skill

Analyze code for violations of the SOLID principles of object-oriented design (Single Responsibility, Open/Closed, Liskov Substitution, Interface Segregation, Dependency Inversion)

1 skill

An expert-guided skill for creating layered software specification documents for greenfield projects. Produces Vision, Business Requirements, Software Requirements, Architecture & Design, and Behavioral Spec & Test Verification documents.

1 skill

Run this workflow from Codex. Analyze Claude Code session token usage to flag waste risks and cost optimization opportunities. Reviews per-message token data including cache efficiency, conversation sprawl, model selection, and estimated costs across projects.

1 skill