Security & Testing Agent Skills

Build, verify and evaluate evidence-backed protocol-agent releases: pin a document corpus by digest, prove citations as exact bytes, bind…

BiSheng C safe zones. When you need to understand _Safe functions, _Safe blocks, _Unsafe escape blocks, safe zone restrictions…

Ensure async-path backend code that could block the asyncio event loop is protected by a teeth-verified runtime anchor in…

Full safety mode: destructive command warnings + directory-scoped edits.

Master Test Architect and Quality Advisor.

BiSheng C safe zones. When you write _Safe functions, _Unsafe escape blocks, or decide where the safety boundary goes, use this Skill.

Audit an external AI/API provider and its integration into a BT6 repository for service reality, independent verification, trust…

Diagnose and fix an open bug tracked under bugs/ in the current repo, the test-driven way, then close it.

Find correctness bugs in source code through depth-first exploration.

Diagnose and fix software bugs through evidence-based investigation.

Turn a vague, intermittent, or environment-specific bug report into a minimal evidence-backed reproduction before proposing a fix.

Discovers BugBug project, repository, and tested-application context.

Demonstrate build-artifact tampering and lack of provenance (CICD-SEC-4/CICD-SEC-9 artifact integrity) during an authorized assessment…

Build discipline for agent sessions that WRITE code — the failure modes no review-shaped skill catches, because nothing is being reviewed.

Smoke test the Agent Builder feature branch end-to-end against a hermetic project scaffolded by the skill (linked to the current worktree).

Use this skill when handling user input, working with memory, file I/O, network operations, or implementing security-sensitive features.

BiSheng C translation from C. When you need to translate/convert/port C code (.c/.h) to BiSheng C (.cbs/.hbs), add ownership annotations…

BiSheng C translation from C. When you translate C code to BSC, add ownership annotations, or migrate a C project to BSC, you MUST use…

Resolve deny-by-default role capabilities at every shipped executor/provider boundary, require host enforcement attestations for dangerous…

Card/key/cdkey generation and verification workflow.

Career data governance inventories private workspace data and plans disclosure, export, retention, legal hold, scoped deletion, and…