Codex CLI Skills

Thorough code review — checks correctness, security, performance, readability, and test coverage. Gives actionable feedback ranked by severity.

Zero to power user in one invoke — detects OS, installs Homebrew/apt/Node.js/Python, sets up Claude Code, authenticates skills-hub CLI, connects MCP servers, and installs recommended skills based on your project. Cross-platform (macOS, Linux, WSL). Idempotent. Use when: 'quickstart', 'setup machine', 'new machine setup', 'install everything', 'get started', 'onboard me', 'setup skills-hub', 'fresh install'.

Stop overthinking. Ship the thing. The Ralph Wiggum approach to software delivery: naive boldness backed by the confidence that you can fix anything after it lands. For when your inner perfectionist needs to sit down.

Systematic code refactoring — extract functions, reduce complexity, eliminate duplication, improve naming, and split large files. Preserves behavior with tests.

Set up CI/CD pipelines — generates GitHub Actions, GitLab CI, or Bitbucket Pipelines with lint, test, build, deploy stages. Detects stack automatically.

Scan a codebase for security vulnerabilities — OWASP Top 10, secrets in code, dependency CVEs, auth flaws, injection risks, and misconfigurations. Fixes what it finds.

Full product launch pipeline. Competitive analysis, positioning, landing page SEO, schema markup, social media content, and pitch deck. From idea to launched and marketed.

A comprehensive social media automation skill that monitors platforms like Reddit and other social media sites to generate, post, and reply with relevant content promoting your app. It ensures content relevance, adheres to platform policies, and incorporates best practices for engagement and safety.

Review or design REST/GraphQL APIs — checks naming, versioning, pagination, error handling, authentication, rate limiting, and consistency against industry standards.

Repository health dashboard — scores your repo on tests, docs, CI, dependencies, security, code quality, and contributor experience. Actionable scorecard with fixes.

Generates and reviews a complete set of legal documents. NDAs, privacy policies, GDPR compliance, data processing agreements, and formatted legal documents ready for review.

Add rate limiting to APIs — configure per-user and per-IP limits, sliding window algorithms, tiered quotas, retry-after headers, and progressive abuse detection.

Pre-deploy safety check — runs tests, security audit, performance check, and dependency audit in sequence. Catches issues before they hit production.

The ultimate quality gate. Unit tests, integration tests, load tests, security audit, OWASP check, accessibility, performance, SEO, code review, and PR summary. Nothing gets through without passing everything.

Systematic bug hunting — traces error reports through the code, reproduces with tests, identifies root cause, fixes, and adds regression guards. From report to resolution.

Add comprehensive error handling — try/catch, error boundaries, retry logic, user-facing error messages, and graceful degradation across the entire stack.

API health check pipeline — validates all endpoints, checks response schemas, tests error handling, verifies auth guards, and benchmarks response times.

The most thorough security audit possible. OWASP, penetration testing, dependency scanning, secret detection, HIPAA, GDPR compliance, custom Semgrep rules, and a generated security report.