Security & Testing Agent Skills

The Definitive Guide and Engineering Patterns for Opengrep (opengrep.dev), covering the open-source static code analysis engine (SAST)...

This skill should be used when the user asks "is this regex safe", "what is ReDoS", "why does CPU spike on one request", "how do I safely…

Accessibility audit skill for scanning, fixing, and verifying WCAG 2.2 Level A and AA compliance across React, Next.js, Vue, Angular…

Run tests on BrowserStack. Use when user mentions "browserstack", "cross-browser", "cloud testing", "browser matrix", "test on safari"…

Generate Playwright tests. Use when user says "write tests", "generate tests", "add tests for", "test this component", "e2e test", "create…

Use when a security incident has been detected or declared and needs classification, triage, escalation path determination, and forensic…

Set up Playwright in a project. Use when user says "set up playwright", "add e2e tests", "configure playwright", "testing setup", "init…

Migrate from Cypress or Selenium to Playwright.

Reviews Altium Designer schematics to detect unconnected pins, missing footprints, and net errors with datasheet-backed defect validation.

Analyze a Coval adversarial / red-team testing report and turn it into an agent-hardening plan.

Query ATT&CK data with attackcti, mitreattack-python, and stix2, then build MITRE ATT&CK Navigator layers and multi-layer heatmap overlays…

Queries Azure Monitor activity logs and sign-in logs via azure-monitor-query

Parse Chromium-based browser databases with Hindsight to extract and correlate browsing history, downloads, cookies, cached content…

Detect abnormal access in AWS S3, GCS, and Azure Blob Storage by analyzing CloudTrail Data Events, GCS audit logs, and Azure Storage…

Analyzes malware C2 communication over HTTP, HTTPS, DNS, and custom

This skill analyzes project dependencies for security vulnerabilities, outdated packages, and license compliance issues.

Perform comprehensive forensic analysis of raw (dd), E01, or AFF disk images with Autopsy and The Sleuth Kit, recovering deleted files…

Detect and analyze heap spray attacks in memory dumps using Volatility3

Analyzes indicators of compromise (IOCs) including IP addresses, domains,

Uses the Linux Audit framework (auditd) with ausearch and aureport utilities

Analyze malicious Linux ELF binaries — botnets, cryptominers, ransomware,