Security & Testing Agent Skills

Agent skill for authentication - invoke with $agent-authentication

Use when designing or reviewing an AI agent system that needs policy-based access controls, intent classification, tool-level rate…

Use for runtime policy enforcement and governance of AI agents with Microsoft's Agent Governance Toolkit (AGT).

Use when auditing an AI agent system against the OWASP Agentic Security Initiative Top 10 — checks tool access, prompt boundaries, memory…

Set up and connect a new Coval agent for evaluation.

Configure Algolia enterprise access control: team-scoped API keys, Secured

Analyzes bootkit and advanced rootkit malware infecting the Master

Parse and analyze Cobalt Strike Malleable C2 profiles with dissect.cobaltstrike (profiles and beacon-payload configs) and pyMalleableC2…

Investigate compromised Docker containers by analyzing images, layers,

Detonate malware samples in Cuckoo Sandbox to observe runtime behavior

Leverages Splunk Enterprise Security and SPL (Search Processing Language)

Extract and analyze Windows Registry hives with tools like RegRipper

Automates Android application analysis, decompilation, and dynamic instrumentation for security research.

Automate Anonyflow tasks via Rube MCP (Composio).

When to activate: API security, rate limiting, JWT auth, OAuth2, API keys, WAF, GraphQL security, BOLA, broken object level authorization

When to activate: AppSec, application security, secure SDLC, security champions, threat modeling sprint, security requirements, secure…

[COMMUNITY] Assess Austrian DSG / GDPR obligations — Data Protection Authority patterns, §§12–13 DSG special provisions, image processing…

[COMMUNITY] Generate an ASD Essential Eight maturity posture assessment for Australian Government projects against all eight mitigation…

[COMMUNITY] Generate GDPR (EU 2016/679) compliance assessment for EU/EEA data processing — legal basis mapping, data subject rights…

Analyze assertion quality, depth, variety, and false confidence in existing tests.

Activation requires either supplied .NET coverage reports/percentages/line, branch, or condition metrics, or an explicit request to…