Security & Testing Agent Skills

Verification loop for Spring Boot projects: build, static analysis, tests with coverage, security scans, and diff review before release or…

When to activate: Spring Security, authentication, authorization, OAuth2 resource server, custom filters, UserDetailsService, security…

Remediates SQL injection security findings safely using validated execution plans, allowlisted tools, and strict outcome verification.

Provide systematic methodologies for automated SQL injection detection and exploitation using SQLMap.

Guides structured bug bounty and vulnerability research workflows across five core testing phases with curated playbooks and methodology.

SRE-focused security reasoning for designing, reviewing, and operating systems, automation, recovery mechanisms, operator workflows, and…

Execute this skill enables AI assistant to manage and monitor ssl/tls

Automate Sslmate Cert Spotter API tasks via Rube MCP (Composio).

Secure WebContainer deployments: CSP headers, sandbox isolation, input

Look up the latest TheFocus.AI standards, inspect the current (or named) project, and write a dated mapping report: how the project…

Run static analysis tools including SonarQube, ESLint, and multi-language linters

Deep static analysis of codebases for quality, complexity, and migration readiness assessment

Guides the agent on executing static security scanning, auditing code for shell injections, and verifying API credential masks.

Stay strictly inside the current working directory — do not read, search, list, navigate to, or take any inspiration from anywhere else on…

Apply test-driven development with small, behavior-focused feedback loops.

Apply when debugging. Trace each symptom to its root cause and fix it there; reproduce first, ask why until you reach it, resist nil-check…

Strict RED->GREEN->REFACTOR test-driven development with enforcement.

Use when delegated work needs runtime guardrails — constrain sub-agents with loop detection, circuit breakers, and escalating sandbox…

Suede Labs AI eval design and coverage audit: AI-SPEC, failure-mode rubric with severity scoring, concrete pass/fail eval cases, coverage…

Suede Labs AI blunt A-F ship grade for a code change across correctness, security and permissions, data and state, domain truth, UX and…

Suede Labs AI MCP release QA, scoped to this pack's own server (mcp/suede-skills-mcp.mjs) and its catalog, install, and docs surface.