octopus-security-audit

1> **Host: Codex CLI** — This skill was designed for Claude Code and adapted for Codex.
2> Cross-reference commands use installed skill names in Codex rather than `/octo:*` slash commands.
3> Use the active Codex shell and subagent tools. Do not claim a provider, model, or host subagent is available until the current session exposes it.
4> For host tool equivalents, see `skills/blocks/codex-host-adapter.md`.
5 
6 
7## Execution Contract (MANDATORY - CANNOT SKIP)
8 
9This generated Codex skill preserves an enforced workflow contract from the source skill.
10 
11**PROHIBITED:**
12- Do not summarize, simulate, or skip the referenced workflow command when this skill requires execution.
13- Do not claim provider output or validation artifacts exist without checking the actual files or command output.
14- Do not continue silently when a required provider, command, or host capability is unavailable; report the unavailable dependency and use a supported fallback.
15 
16 
17# Security Audit Skill
18 
19**Your first output line MUST be:** `🐙 **CLAUDE OCTOPUS ACTIVATED** - Security Audit`
20 
21Invokes the security-auditor persona for thorough security analysis during the `ink` (deliver) phase. Supports both quick OWASP scanning and full adversarial red/blue team testing.
22 
23## Usage
24 
25```bash
26# Quick scan via security-auditor persona
27"${CLAUDE_PLUGIN_ROOT:-${CODEX_PLUGIN_ROOT:-${HOME}/.claude-octopus/plugin}}/scripts/orchestrate.sh" spawn security-auditor "Scan for SQL injection vulnerabilities"
28…