Security & Testing Agent Skills

Expert integration of Supabase Auth with Next.js App Router

NIS2 Directive (EU 2022/2555) compliance for critical infrastructure entities, covering the 10 minimum security measures.

Enter "offline mode" — for security reasons, do NOT use any tool or command that touches the internet or an external network.

Use when product or application logic may contain contradictory states, mixed date or filter scopes, KPI/card mismatches, misleading…

Use when fixing bugs, refactoring, changing shared state, or reviewing a patch where behavior that already works could regress; triggers…

Generate a project-local verification skill that drives your app the way a user does — any language, framework, or platform.

Use for \"interrogate\", \"adversarial review\", \"multi-model review\", \"challenge this\", \"stress test this code\", \"find blind…

Periodic pass that keeps a project's verification skill and feature map honest: parallel source readers per feature, one live session…

Use when setting up nono to run Claude Code securely, creating or modifying nono profiles, adding per-session filesystem permissions, or…

Define data classification, minimization, retention, and deletion controls for a Notion integration.

Detect known malicious npm package versions and install-time supply-chain indicators in repositories, lockfiles, and node_modules.

Use when completing tasks, implementing major features, or before merging to verify work meets requirements

Expert in Odoo access control: ir.model.access.csv, record rules (ir.rule), groups, and multi-company security patterns.

Comprehensive Odoo testing toolkit for generating test skeletons, running test suites, creating mock data, and analyzing test coverage…

Penetration testing, ethical hacking, and vulnerability assessment techniques for authorized security testing

Hunting skill for ssrf vulnerabilities. Built from 15 public bug bounty reports including AWS metadata SSRF (HackerOne $25k Analytics PDF…

Audits web components and applications for WCAG 2.2 accessibility compliance, covering color contrast, semantic HTML, keyboard navigation…

Open-source pipeline: fork, sanitize, and package private projects for safe public release.

Author OpenClaw Docker E2E and live provider Docker lanes.

Inspect, patch, validate, publish, or confirm OpenClaw GHSA security advisories and private-fork state.

Data Handling for OpenEvidence.