Security & Testing Agent Skills

Debug systematically using root-cause analysis.

Fix critical and high-severity accessibility, input, and state issues deterministically.

Harden code against vulnerabilities: OWASP prevention, input validation, authentication, data storage, and third-party safety.

Analyze failing eval cases and propose improvements.

Write tests first with RED-GREEN-REFACTOR cycle.

Validate, test, and score the quality of skills within the claude-skills ecosystem.

k6 performance and load testing. Covers writing test scripts in JavaScript/TypeScript, all test types…

REQUIRED before ANY `op` command or whenever a task needs an API key, token, password, credential, or secret (OPENAI_API_KEY…

Agent skill for authentication - invoke with $agent-authentication

Run all three agent integration phases sequentially: research, write-tests, and implement using E2E-first TDD (unit tests written last).

How auth works in agent-native apps. Use when wiring login/signup, configuring auth modes, setting up organizations, protecting routes, or…

Agent skill for benchmark-suite - invoke with $agent-benchmark-suite

Agent skill for byzantine-coordinator - invoke with $agent-byzantine-coordinator

Use only when writing/updating/fixing C++ tests, configuring GoogleTest/CTest, diagnosing failing or flaky tests, or adding…

Safety guardrails for destructive commands. (gstack)

Chrome Extension auth with @clerk/chrome-extension -- popup/sidepanel

Agent skill for code-analyzer - invoke with $agent-code-analyzer

MUST USE for any real runtime debugging across ANY language or binary — crashes, silent failures, wrong responses, stuck processes, memory…

Django security best practices, authentication, authorization, CSRF protection, SQL injection prevention, XSS prevention, and secure…

Playwright E2E testing patterns, Page Object Model, configuration, CI/CD integration, artifact management, and flaky test strategies.

Orchestrate E2E test triage and fix implementation: runs triage-ci then implement sequentially.