Security & Testing Agent Skills

Harden a CI/CD delivery pipeline against Insufficient Flow Control (CICD-SEC-1).

Detect and prevent self-hosted CI runner abuse (CICD-SEC-7).

Risk-paranoid interrogation of any plan that touches data, compliance, or production access.

Secure Clari API tokens and implement data handling best practices.

Hardens Claude Code environments using a three-layer defense system to prevent prompt injection and secret leakage.

Implement credit spending limits, data privacy enforcement, and input

Troubleshoot common Clerk errors and issues.

Implement user sign-up and sign-in flows with Clerk.

Handle user data, privacy, and GDPR compliance with Clerk.

Migrate from other authentication providers to Clerk.

Reference architecture patterns for Clerk authentication.

Common Clerk SDK patterns and best practices.

Create mock stdin utilities for interactive CLI testing.

Expert UX evaluator for CLIs, terminal tools, and developer APIs.

Run ClickHouse integration tests in CI with GitHub Actions and Docker containers.

Audit cloned or reimplemented websites for fidelity gaps, tracking scripts, source-brand and language residue, placeholders, and risky…

Use when debugging by narrowing the search space — isolate the failure domain so the bug reproduces in a controlled, minimal environment.

Demonstrate cloud identity persistence during an authorized cloud assessment.

Demonstrate container-to-host escape from an over-privileged container during an authorized assessment — privileged mode, host namespace…

This skill provides comprehensive knowledge for implementing Cloudflare Turnstile, the CAPTCHA-alternative bot protection system.

Security audit for Sitecore, Umbraco, and Optimizely CMS projects.