Security & Testing Agent Skills

Generate a test pass from a PRD, user story, or acceptance criteria — happy paths, boundaries, error handling, permissions, and…

Tests WebSocket API implementations for missing upgrade-handshake authentication,

Runs full Trailmark structural analysis by building a graph, running `preanalysis()`, and reporting hotspots, taint, blast radius…

Debugs the Buttercup CRS (Cyber Reasoning System) running on Kubernetes.

Triages and prioritizes vulnerabilities with CISA's Stakeholder-Specific

Validates Terminal User Interface (TUI) output using freeze for screenshot capture and LLM-as-judge for semantic validation.

Manages changelog entries for Prowler components following keepachangelog.com format.

Use when UI changes are complete and e2e tests need updating.

This skill enables Claude to validate authentication implementations against security best practices and industry standards.

Implement team access control and spending governance for Vast.ai GPU

Apply Vast.ai security best practices for API keys and instance access.

Verify information accuracy against codebase and documentation.

E2E testing patterns for Prowler UI (Playwright).

Detect visual changes in UI components using screenshot comparison.

Generate test cases for the vllm-project/vllm repository (https://github.com/vllm-project/vllm).

Migrates .NET test projects from VSTest to Microsoft.Testing.Platform (MTP).

Audit wallet security by analyzing token approvals, permissions, and

WCAG 2.1/2.2 compliance, auditing, and remediation.

Harden a web application against server-side request forgery by constraining and monitoring server-initiated outbound requests.

Web testing with Playwright, Vitest, k6.

Apply Webflow API security best practices \u2014 token management, scope\