Security & Testing Agent Skills

Cross-stack source code asset audit — classifies every file, detects embedded third-party libraries, and delivers actionable four-level…

Use when errors occur deep in execution and you need to trace back to find the original trigger - systematically traces bugs backward…

Creates language variants of existing Semgrep rules.

Visualize whether skills, rules, and agent definitions are actually followed — auto-generates scenarios at 3 prompt strictness levels…

Scans Solana programs for 6 critical vulnerabilities including arbitrary CPI, improper PDA validation, missing signer/ownership checks…

Verifies code implements exactly what documentation specifies for blockchain audits.

Identifies dependencies at heightened risk of exploitation or takeover.

Use when asked to debug, fix a bug, investigate an error, or do root cause analysis, and when users report errors, stack traces…

Use this skill when writing new features, fixing bugs, or refactoring code.

Guides authoring of high-quality YARA-X detection rules for malware identification.

De-identify clinical research data before LLM-assisted analysis.

Enforces strict pre-delivery self-inspection, disk re-reading, and encoding verification to eliminate AI hallucinations and low-level file…

Demonstrate dependency confusion / substitution (CICD-SEC-3, dependency-chain abuse) during an authorized assessment — getting a build to…

Dependency management, version conflict resolution, security patch updates,

Plant canarytokens and honey credentials and alert on breach.

Design and create a simulation persona for testing an AI agent.

Detect and block spearphishing emails that use personalized, researched

Use when diagnosing or fixing functional bugs, flaky tests, regressions, crashes, data corruption symptoms, production incidents, or…

Agent-only procedure for diagnosing reported bugs.

Exploratory QA of web apps: find bugs, evidence, reports.

Get SARIF from `dotnet build` via the compiler ErrorLog property, using a per-project relative path so later projects do not overwrite…