Security & Testing Agent Skills

Enterprise Rbac for OpenEvidence.

Security Basics for OpenEvidence.

Review OpenRouter integration for regulatory compliance (SOC2, GDPR,

Diagnose openskills-runtime execution failures in sandboxed paths (Landlock, seatbelt, native script execution, wasm execution) and…

Audits and validates AI agent operations to ensure security compliance and procedural integrity.

Hunt account takeover taxonomy — 9 distinct paths to ATO, plus chains.

Supply-chain security audit — Composer + npm dependency CVE check, license compatibility (GPL-compatible only), abandoned package…

Hunting skill for xxe vulnerabilities. Built from 10 public bug bounty reports including SVG-upload XXE, Office-doc (PPTX/DOCX) XXE, SOAP…

Test equipment integration for signal analysis (oscilloscope and logic analyzer)

Comprehensive OSINT methodology for external red-team operations and authorized attack-surface assessments.

Test a live OutSystems app after a change lands: run SQL against its Dev database (db_query), invoke server actions in the running app…

Check compliance with OWASP Top 10 security risks and best practices.

Apply this skill whenever writing or reviewing code that handles user input, makes external API calls, scrapes websites, stores…

Orchestrate OWASP-based application and API security reviews and route findings to the appropriate specialized security skill.

When to activate: OWASP, security checklist, injection, XSS, IDOR, SSRF, security misconfiguration, vulnerability

Deep integration with OWASP ZAP for automated security scanning, vulnerability detection, and API security testing.

Expert skill for packet capture and analysis using libpcap/Wireshark.

Apply when debugging. Trace each symptom to its root cause and fix it there; reproduce first, ask why until you reach it, resist nil-check…

Apply Palantir Foundry security best practices for credentials, scopes,

Analyzes software binary patches to identify root causes of vulnerabilities, assess security regressions, and reproduce security findings.

Hunt shadow / zombie / undocumented API surface (OWASP API9 Improper Inventory Management) — enumerate the full API version history…