What problem does it solve? The Checkmarx security plugin cannot scan code until the cx CLI is installed, at a supported version, and authenticated — and until then every write to a scannable file is blocked. This Skill walks the developer through the full setup so the security gate clears and scanning can begin. ## Core Features & Use Cases - Guided installation: Detects whether the cx CLI is present, runs the bundled checksum-verified bootstrap installer, or falls back to per-OS manual install steps for macOS, Linux, and Windows. - Two authentication paths: Configures an API key (which encodes server URL and tenant) or browser-based OAuth sign-in with MFA, including admin pre-filled URL/tenant support. - Verification and recovery: Validates connectivity with cx auth validate, distinguishes credential failures from network failures, handles expired-credential re-authentication, and troubleshoots PATH, version, and capability issues. - Use Case: A developer's file write is blocked because cx is missing; the Skill installs the CLI to the canonical store, authenticates it, and confirms the security gate clears on the next action. ## Quick Start Run /cx-cli-setup to install and authenticate the Checkmarx cx CLI so the security plugin can start scanning your code.
