Security & Testing Agent Skills

Intercept destructive commands before execution — rm -rf, DROP TABLE, force-push, git reset --hard, and similar irreversible operations.

This skill should be used when the user wants to "run an evaluation", "evaluate my ADK agent", "write an eval dataset", "analyze eval…

Use when implementing any feature or bugfix, before writing implementation code

Use when running QA Lab channel message flow evidence.

Analyze codebase for resilience gaps — missing retry logic, absent timeouts, circuit-breaker opportunities, single points of failure, and…

Review local character animation with schema checks, Playwright browser previews, frame sampling, and FFmpeg/ffprobe final output checks.

Use before claiming work is complete, fixed, or passing.

Close Insufficient Logging & Visibility (CICD-SEC-10) with comprehensive, tamper-resistant CI/CD audit logging and alerting.

Demonstrate Insufficient Flow Control (CICD-SEC-1) during an authorized assessment — pushing code, config, or artifacts through the…

Harden CI/CD identity & access management against CICD-SEC-2.

Demonstrate Insufficient Pipeline-Based Access Controls (CICD-SEC-5) during an authorized assessment — abusing the fact that a running…

Harden Pipeline-Based Access Controls against CICD-SEC-5.

Demonstrate CI/CD secret exfiltration (CICD-SEC-6, Insufficient Credential Hygiene) during an authorized assessment — recovering pipeline…

Detect and prevent CI/CD secret exposure (CICD-SEC-6).

Demonstrate Ungoverned Usage of Third-Party Services (CICD-SEC-8) during an authorized assessment — abusing the broad, unaudited access…

Use when Codex should ask Claude CLI for an adversarial challenge review that pressure-tests implementation direction, design choices…

Set up Python test environment in Claude Code for web where flox is unavailable.

Audit or refresh OpenClaw maturity scorecard docs from root taxonomy, maturity scores, and QA evidence artifacts without using maintainer…

Programmatic Clerk sign-in for e2e testing.

Expert patterns for Clerk auth implementation, middleware,

Implement session management and middleware with Clerk.