Security & Testing Agent Skills

Async testing patterns with race condition and timing issue detection

Provides file paths to language-specific extension files for the code-testing pipeline.

Use this skill before answering, planning, or editing any MSTest 3.x-to-4.x upgrade or post-upgrade failure.

Deep formal test smell audit based on academic research taxonomy (testsmells.org).

Design and review acceptance / end-to-end tests with the four-layer model (spec / DSL / protocol driver / SUT).

Sets up and runs Atheris, the coverage-guided Python fuzzer built on libFuzzer.

Secondary Authoritative Time Source

Audit the developer experience of a product, SDK, docs site, or SKILL.md by dropping multiple Claude subagents at it with only a tiny task…

Inventories every SSH key, Git signing key, GPG key, and Keychain credential on a macOS machine and reports weak, stale, unprotected…

Auditing Kubernetes cluster RBAC configurations to identify overly permissive

Auditing Terraform infrastructure-as-code for security misconfigurations

Sonnet Amplified fullstack engine. 34 modes, SEC-01~15 OWASP security, 13 runtime hooks, 75% token reduction.

Production-ready Auth.js v5 setup for Next.js and Cloudflare Workers.

Automate Auth0 tasks via Rube MCP (Composio).

Check installed community skills for updates.

AWS security configuration scanning and hardening using Prowler, Security Hub, and AWS Config

AI-powered E2E web testing — eyes and hands for AI coding tools.

Build content moderation applications using the Azure AI Content Safety SDK for Java.

Azure security configuration scanning and hardening using Azure Security Center, Azure Policy, and ScoutSuite

Testing patterns for Prowler API: JSON:API, Celery tasks, RLS isolation, RBAC.

Scan code changes for security vulnerabilities using STRIDE threat modeling, validate findings for exploitability, and output structured…