Security & Testing Agent Skills

Drafts a board-approvable Information Security Policy covering data classification, access controls, encryption, incident response, breach…

Use when writing a constructor or initialiser, when a type needs a collaborator to do its work, or when adding a parameter so something…

Scan for input validation vulnerabilities and injection risks.

Hunt ASP.NET-specific surface — ViewState deserialization (signed-only vs encrypted), machineKey recovery, dual-parser MAC-bypass…

Configure Instantly.ai workspace access control, team management, and

Apply Instantly.ai security best practices for API keys, scopes, and

Install the non-deterministic instrumentation layer in a .NET repository so the coding agent works with the team's tools and inside the…

Hardware-free testing of instrument-control code — mock architecture (ordered call_log, scripted responses, state simulation, failure…

Install the deterministic instrumentation layer in a .NET repository so an AI coding agent cannot ship work that breaks the team's rules…

Integrates OWASP ZAP (Zed Attack Proxy) into GitHub Actions and GitLab CI pipelines, covering baseline, full, and API scan configuration…

The method for finding the gap between what a system is supposed to do and what the code actually does — the class of bug generic scanners…

Intercepts and analyzes HTTP/HTTPS traffic from mobile applications

Apply Intercom security best practices for tokens, webhook verification,

Investigates phishing email incidents from initial user report through

Evaluates IP addresses and proxy nodes across registries, geolocation consensus, fraud scores, and AI service accessibility.

Automate Ipinfo IO tasks via Rube MCP (Composio).

Comprehensive risk management skill implementing ISO 14971:2019 methodology for medical device risk analysis

When to activate: ISO 27001, ISMS, information security management, Annex A controls, risk assessment, certification, surveillance audit…

ISO/IEC 42001:2023 AI Management System (AIMS) specialist for compliance teams running internal audits.

Use when implementing ISO 27001 controls — ISMS, risk assessment, and annex controls.

When to activate: Java testing, JUnit 5, Mockito, AssertJ, Testcontainers, WireMock, Spring MVC test, parameterized tests