Security & Testing Agent Skills

Build structured communication templates for malware incidents (ransomware,

Implement a phishing report button (Microsoft 365 built-in Report button

Deploy and configure the Havoc C2 framework (teamserver, HTTPS/HTTP/SMB

Apply bottom-up and top-down role mining techniques, including clustering

Build threat actor profiles by collecting OSINT from vendor reports, paste sites, dark web forums, social media, and code repos…

Build automated IOC enrichment pipelines in Splunk Enterprise Security by ingesting threat feeds into KV Store collections and correlating…

Builds automated threat intelligence feed integration pipelines connecting

Execute comprehensive web application security testing using Burp Suite's integrated toolset, including HTTP traffic interception and…

Discovering and accessing unprotected pages, APIs, and administrative

This skill should be used when the user asks to write, review, debug, optimize, test, fuzz, port, harden, profile, or design software in…

Use only when writing/updating/fixing C++ tests, configuring GoogleTest/CTest, diagnosing failing or flaky tests, or adding…

C# and .NET testing patterns with xUnit, FluentAssertions, mocking, integration tests, and test organization best practices.

Explore a codebase to find opportunities for architectural improvement, focusing on making the codebase more testable by deepening shallow…

Test-driven development with red-green-refactor loop.

Identify mission-critical (CbC-mandatory) code in a change, discharge its correctness claims through a pluggable verifier, record the…

On-chain analysis and transaction forensics for blockchain security investigations.

Use when planning, running, or learning from chaos engineering experiments.

Run chaos engineering experiments using Chaos Monkey, Litmus, or Gremlin

Generate characterization tests to capture and verify existing behavior before migration

This skill uses the owasp-compliance-checker plugin to automatically identify potential security vulnerabilities based on the OWASP Top 10…

Use when the user wants a serious checkpoint before continuing work, especially after meaningful implementation, refactor, audit…