Security & Testing Agent Skills

Use when deciding what to test, at which layer, and what runs when.

Test-driven development. Use when the user wants to build features or fix bugs test-first, mentions "red-green-refactor", or wants…

Performs high-speed, stateless subdomain discovery and verification for comprehensive infrastructure security audits.

Escalate privileges in a Kubernetes cluster by abusing over-permissive RBAC during an authorized assessment.

Build a fast, deterministic local test loop for LangChain 1.0 / LangGraph\

Apply LangChain security best practices for production.

Language-specific verification for Python, TypeScript/JavaScript, and Go.

Laravel 13 testing with Pest PHP 4 or PHPUnit 12.

OWASP Top 10 security audit and secure coding guidelines for Laravel + React/Inertia.js applications.

Use when configuring Laravel-specific auth/session/CSRF/authorization plumbing - Sanctum SPA authentication, session cookie hardening…

Drives Laravel feature development with Pest or PHPUnit — factories, RefreshDatabase, fakes for queues/mail/notifications, Sanctum auth…

Test-driven development for Laravel with PHPUnit and Pest, factories, database testing, fakes, and coverage targets.

This skill should be used when the user asks to "evaluate agent performance", "build test framework", "measure agent quality", "create…

Sets up and runs libFuzzer, the coverage-guided fuzzer built into LLVM, on C/C++ code that compiles with Clang.

Review Bitcoin Lightning Network protocol designs, compare channel factory approaches, and analyze Layer 2 scaling tradeoffs.

Use when a bounded system or design change needs a quick evidence-backed security analysis before implementation, approval, or release.

Data handling best practices for Lindy AI agents.

Security Basics for Linktree.

Audits a repository against the Adversis v0 security baseline for agentic SaaS applications.

Execute systematic privilege escalation assessments on Linux systems to identify and exploit misconfigurations, vulnerable services, and…

Use for Livewire security work. Covers what a public property publishes, snapshot serialization, #[Locked], the persistent middleware gap…