Security & Testing Agent Skills

Comprehensive security code review workflow for a target repository, producing a markdown report with findings and recommendations.

Crabbox/Testbox remote proof for OpenClaw: trusted-source routing, untrusted isolation, Linux/macOS/Windows/WSL2, live E2E, desktop…

Generate a project-local verification skill that drives your app the way a user does — any language, framework, or platform.

Cross-product troubleshooting of user connectivity issues spanning ZPA, ZIA, ZDX, and ZCC.

/cs:aims-audit <scope> — ISO/IEC 42001 AIMS internal-audit 6-question forcing interrogation.

/cs:compliance-readiness <program> — Multi-framework compliance officer 6-question forcing interrogation of any compliance program.

Spin up a live local Omnigent server and exercise the Cursor SDK harness end-to-end — build cursor agents, run real turns, smoke-test, and…

Set up and run USB traffic capture with a Cynthion USB analyzer.

Cypress testing patterns, custom commands, component testing, and CI integration.

Best practices for using `expect` and `package:matcher`.

Run what this repository already defines (examples—substitute from package.json scripts, Makefile, CI config): Record in…

Production-ready authentication framework for TypeScript with first-class Cloudflare D1 support.

Performs comprehensive C/C++ security review for memory corruption, integer overflows, race conditions, and platform-specific…

Scans Cairo/StarkNet smart contracts for 6 critical vulnerabilities including felt252 arithmetic overflow, L1-L2 messaging issues, address…

Use this skill when integrating Cloudflare Zero Trust Access authentication with Cloudflare Workers applications.

Scans a codebase for security vulnerabilities using CodeQL's interprocedural data flow and taint tracking analysis.

Detects timing side-channel vulnerabilities in cryptographic code.

Scans Cosmos SDK blockchain modules and CosmWasm contracts for consensus-critical vulnerabilities — chain halts, fund loss, state…

Laravel security best practices for authn/authz, validation, CSRF, mass assignment, file uploads, secrets, rate limiting, and secure…

Load testing with k6/Artillery, response time thresholds, memory leak detection, N+1 query detection, and CI integration.

Use when finishing a feature, fixing a bug, before committing React code, or when the user types `/doctor`, asks to scan, triage, or clean…