What problem does it solve? The Checkmarx security plugin cannot scan code until the cx CLI is installed, at a supported version, and authenticated — and a missing or misconfigured CLI leaves every gated action blocked. This Skill walks the developer through the full setup so the security gate clears and scanning can begin. ## Core Features & Use Cases - Guided installation: Runs the bundled cx-bootstrap.sh installer with checksum verification, or falls back to per-OS manual install steps for macOS, Linux, and Windows. - Two authentication paths: Configures the CLI via API key or browser-based OAuth sign-in with MFA, including re-authentication when credentials expire. - Verification and troubleshooting: Validates connectivity with cx auth validate, enforces a minimum CLI version, and resolves PATH, self-hosted URI, and gate-still-denied issues. - Use Case: A hook blocks a file write because cx is not authenticated. Invoke this Skill to assess the current state, install or upgrade the CLI, sign in, and confirm the gate clears on the next tool call. ## Quick Start Ask the assistant to set up and authenticate the Checkmarx cx CLI so the security plugin can start scanning.