Security & Testing Agent Skills

Implements OAuth 2.0 and OpenID Connect authentication flows with proper security, token management, and common provider integrations.

Comprehensive Odoo security auditor for model access rules, HTTP route authentication, sudo() usage, SQL injection risks, and record rule…

Penetration testing, ethical hacking, and vulnerability assessment techniques for authorized security testing

Audits project dependencies for open-source license compatibility and compliance risks across multiple distribution models.

Continuously audit, live-test, and stress-test the current OpenClaw codebase across at least ten independently scoped subsystem lanes…

Prepare, snapshot, run, rerun, debug, or interpret OpenClaw Parallels guest install, onboarding, gateway smoke, and upgrade checks across…

Plan and run pre-release OpenClaw plugin validation across bundled plugins, package artifacts, lifecycle commands, doctor/fix, config…

Run, watch, debug, extend, or explain OpenClaw qa-lab and qa-channel scenarios, artifacts, and live lanes.

Triage, redact, clean up, and resolve OpenClaw GitHub Secret Scanning alerts in issues or PRs.

Investigate OpenClaw pnpm test memory growth, Vitest OOMs, RSS spikes, and heap snapshot deltas.

Benchmark, diagnose, and optimize OpenClaw test and plugin-suite runtime, import hotspots, CPU/RSS, heap growth, and slow coverage paths.

Choose, run, rerun, or debug OpenClaw tests, CI checks, Docker E2E lanes, release validation, and the cheapest safe verification path.

QA opencode itself, per case: verify the CLI/terminal (opencode run, db, serve, export), prove a specific plugin hook/action/event fired…

Implement data privacy controls for OpenRouter API usage.

Browser-based user acceptance testing via Playwright MCP tools.

Supply-chain security audit — Composer + npm dependency CVE check, license compatibility (GPL-compatible only), abandoned package…

Orchestrate fixing a bug — reproduce it as a failing regression test, fix to green, review, and gated commit — by delegating each phase to…

Test-driven development workflow with comprehensive coverage requirements including unit, integration, and E2E tests

Set up Cloudflare Turnstile end-to-end in a project: scan the codebase, create the widget via the Cloudflare API, deploy the managed…

Comprehensive quality verification system for code changes with build, type, lint, test, and security checks

Run a unified audit across all quality dimensions — architecture, code quality, testing, security, docs, and release readiness.