Results for “domain-security”

Agent profile for review prompt injection, tool boundaries, untrusted content, data exfiltration, and human approval gates. Use when Codex needs a specialist agent perspective for planning, implementation, review, debugging, validation, or handoff in this domain.

Grilling session that challenges your plan against the existing domain model, sharpens terminology, and updates documentation (CONTEXT.md, ADRs) inline as decisions crystallise. Use when user wants to stress-test a plan against their project's language and documented decisions.

Exploit Document Object Model (DOM) Based Cross-Site Scripting (XSS) vulnerabilities. Unlike Reflected or Stored XSS, the attack payload is executed purely on the client-side as a result of modifying the DOM environment, often without the payload ever reaching the backend server.

When tackling a task that requires domain expertise beyond general coding ability — architecture patterns, framework-specific gotchas, deployment strategies, security anti-patterns, or specialized workflows — call the windags_skill_graft MCP tool with your task description. You'll receive expert knowledge including decision trees, failure modes, worked examples, and anti-patterns from a library of 503+ curated skills. Only graft when the task genuinely requires specialized knowledge. Simple tasks (rename a variable, fix a typo, format code) do not need grafting.