Security & Testing Agent Skills

Review OneKey PRs and diffs for security, correctness, concurrency, React/RN pitfalls, and repository-specific regressions.

Define and enforce policies, access controls, and compliance rules over Semantica knowledge graphs.

This skill should be used when the user asks to "test API security", "fuzz APIs", "find IDOR vulnerabilities", "test REST API", "test…

Uses Chrome DevTools MCP for accessibility (a11y) debugging and auditing based on web.dev guidelines.

Perform a Cynical Review and produce a findings report.

Use when reviewing scripts, client components, bundles, or runtime behavior related to Avoid inline JavaScript.

Master Bash Automated Testing System (Bats) for comprehensive shell script testing.

Install Claude skills from GitHub repositories with automated security scanning.

Internal downstream skill for ctf-sandbox-orchestrator.

Guides systematic root-cause debugging. Use when tests fail, builds break, behavior doesn't match expectations, or you encounter any…

Automates relentless iterative development cycles using independent verification gates to ensure tasks are completed without human…

Security audit guidelines for web applications and REST APIs based on OWASP Top 10 and web security best practices.

Audit a test file or suite; produce a severity-ranked diagnostic report.

Creates custom Semgrep rules for detecting security vulnerabilities, bug patterns, and code patterns.

Set up, repair, or migrate to Cloudflare Turnstile bot verification in an existing frontend and backend, including server-side Siteverify.

Set up and use 1Password CLI for sign-in, desktop integration, and reading or injecting secrets.

Cross-vendor adversarial code review of the current branch.

Adversarial code review that breaks the self-review monoculture.

Detect dangerous ACL misconfigurations in Active Directory using ldap3

Perform static analysis of Android APK malware using apktool for resource decompilation, jadx for Java source recovery, and androguard for…

Automotive Ethernet implementation and validation expertise