Security & Testing Agent Skills

Use when writing or reviewing unit tests.

Structure tests around observable behavior and realistic dependency boundaries — choosing between a real object, a stub, and a mock…

Use when supplied or retrieved content may contain instructions that conflict with the authorized task.

Interpret and implement an approved test-specification change with traceability from requirement to TP behavior.

Review or change test limits with scale, unit, environment, variant, structure, and provenance controls.

Hunt file upload bugs — RCE via webshell, XSS via SVG/HTML, SSRF via XXE in DOCX, path traversal via filename.

When you need to call a service the org has a SHARED credential for (a SERP/search key, a paid-API key, a data-vendor feed, a Git remote)…

Use when installing language dependencies (npm, pip/uv/PDM, Go modules) in an environment whose only route to a package registry is a…

Use when the agent needs to clone/fetch/push a git repository, manipulate pull requests and query CI status/logs, or…

Capture and review Agent Skill observations, and create, run, diagnose, or iteratively improve Skill evaluations (evals) with the skill-up…

Use when packaging artifacts for USENIX Security Symposium evaluation — the mandatory Phase-1 availability check that acceptance is…

Use when designing or auditing the evaluation of a USENIX Security Symposium paper — building threat-model-faithful experiments…

Use when deciding whether a project belongs at the USENIX Security Symposium or a sibling venue — routing among USENIX Security, IEEE S&P…

Agent skill for v3-security-architect - invoke with $agent-v3-security-architect

Complete security architecture overhaul for claude-flow v3.

Single-task completion verifier. When an implementer claims a task or feature is finished, establish whether the goal was genuinely…

This skill enables Claude to validate Cross-Origin Resource Sharing (CORS) policies.

Validate CSRF protection implementations for security gaps.

Find similar vulnerabilities and bugs across codebases using pattern-based analysis.

Mutation-driven test vector generation. Finds implementations of a cryptographic algorithm or protocol, runs mutation testing to identify…

Apply Vercel security best practices for secrets, headers, and access