Security & Testing Agent Skills

Demonstrate Security Misconfiguration (OWASP Mobile Top 10 M8) during an authorized mobile assessment — finding insecure platform and app…

Audit a live web page in five phases (catalog, click, trace, classify, report) to identify mock data, hardcoded values, LLM-generated…

Create tests following Vitest and Playwright patterns.

Use when implementing any feature or bugfix, before writing implementation code

When it comes to money laundering: negotiation, settlement and escalation in money laundering prevention, AML and KYC: develops a…

Monitors dark web forums, marketplaces, paste sites, and ransomware

Hunt NTLM/Negotiate information disclosure on internet-reachable IIS/SharePoint/Exchange.

Mock Service Worker API mocking, request handlers, and integration testing.

Run Stryker mutation testing on the source files changed in the current branch (vs origin/master) across vitest packages.

Run Stryker mutation testing on a single source file and return a structured, token-frugal report that's pipeable to a follow-up…

Use when reviewing a pull request - security-focused review following repo agent guidance for breaking changes, malicious patterns, and…

Secure Navan API credentials with OAuth 2.0 best practices, SSO/SAML,

Analyze what a change could break beyond its diff and prove the central safety invariant with executable evidence.

Use when preparing an NDSS artifact for evaluation after conditional acceptance — targeting the Available, Functional, and Reproduced…

Use when designing or auditing the evaluation of an NDSS paper — attack demonstrations, defense evaluations under adaptive adversaries…

Use when making an NDSS paper's results reconstructible — snapshotting live-network observations, pinning testbeds and toolchains…

This skill should be used when the user asks to "set up a web server", "configure HTTP or HTTPS", "perform SNMP enumeration", "configure…

Capture credentials and sensitive data from network traffic during an authorized assessment, including via layer-2 adversary-in-the-middle.

Contain and detect lateral movement across an internal network.

Stop and detect layer-2 adversary-in-the-middle and credential sniffing on internal networks.

When to activate: network security, firewall rules, VPC security groups, NACLs, WAF, DDoS protection, VPN, network segmentation, zero…