# Agent skills (test & security baseline)

The same skills live in `.agents/skills/` (Codex) and `.claude/skills/` (Claude Code).
Keep both folders identical when changing a skill: `diff -r .agents/skills .claude/skills`.
Source: Christian's skill repo `cj/claude-skills`; the skill texts are in German.

| Skill | Use it for |
|-------|-----------|
| `codeguard` | Secure-coding rules (Project CodeGuard) while writing or changing code |
| `security-review` | Reviewing a diff against the ASVS-light checklist, in a fresh context |
| `dependency-vetting` | Checking a new npm package before adding it (also `make vet-deps`) |
| `pre-release-gate` | Go / Go with conditions / No-Go before a deploy |
| `authz-idor-audit` | Systematic check of role and object permissions |
| `threat-model-light` | One-page threat model for the app or a feature |