Security & Testing Agent Skills

Use the @executor-js/emulate service emulators (GitHub, Google, Stripe, Resend, WorkOS, …) to test integrations for real — full OpenAPI…

Use when designing a test strategy, choosing test types and coverage priorities, or building a test plan for APIs, data pipelines…

Turn a validated wedge into the scope you can SCORE — a one-sentence job, 20 pass/fail golden cases drawn from real artefacts, an L0–L4…

Records visual proof while testing UI behavior — screen recording with structured test/assertion annotations — then posts the video and a…

Analyzes and simulates BGP hijacking scenarios in authorized lab environments

When and how to add scenarios, chaos events, and invariants to the personhog e2e test harness (rust/personhog-test-harness).

Use when designing or auditing a USENIX FAST storage evaluation, covering real devices and firmware, device-state control (aging…

Use when strengthening USENIX FAST reproducibility and open-science evidence, covering device and firmware provenance, device-state…

Produce the stakeholder-facing validation report: factual proof that features work, bound to a frozen tested SHA, with traceability from…

Improve an EXISTING Claude skill or plugin.

AI-powered file integrity monitoring skill for e-commerce websites.

MANDATORY for static source-to-test pairing: find or list source files/modules without corresponding tests, or suggest test locations from…

Polyglot, parse-only static analysis that pairs source files with referencing tests across Python, TypeScript/JavaScript, Go, Java, Rust…

Find bugs in the current codebase through a number of time-tested methodologies.

Runs a FIPS 140-3 crypto compliance audit across Go repositories, classifying every crypto/ import by risk and generating per-component…

Classifies an individual FIPS crypto audit finding as real cryptography or a non-cryptographic use of a crypto primitive, using structured…

Generates component-specific FIPS remediation TODO lists from crypto audit results, with effort estimates and suggested PR sequencing.

Firebase and Google Identity Platform security testing — full attack-surface coverage with per-section "Report when" criteria and the…

Connect a customer agent to Coval and complete a small first evaluation with inspected voice or chat results.

Run zero-shelter on this project for the first time and wire it in.

Fetches recent integration and e2e test failures from Future-Mortgage/shipyard GitHub Actions…