Security & Testing Agent Skills

Respond to phishing incidents by analyzing reported emails, extracting indicators, sandboxing URLs/attachments, assessing credential…

Plan and execute authorized vishing (voice phishing) pretext calls to

Run a targeted spearphishing simulation for initial access by developing OSINT-derived pretexts, building payloads (HTML smuggling, macro…

Conducts authorized wireless network penetration tests to assess the

Configure AWS Verified Access to provide VPN-less zero trust network

Configures Hardware Security Modules for cryptographic key storage

Hardens LDAP directory services against credential harvesting, LDAP

Designs and implements VLAN-based (802.1Q) network segmentation on

Configures pfSense firewall rules, NAT policies, IPsec/OpenVPN tunnels,

Analyze cryptographic code to detect operations that leak secret data through execution timing variations.

Executes containment strategies to stop active adversary operations

Content moderation API integration using OpenAI Moderation, Perspective API, and others

Generate contract tests for API migrations with consumer-driven contracts and provider verification

This skill should be used when the user asks "why is production latency worse than our load test", "is this benchmark trustworthy", "how…

Interface with Coq proof assistant for formal verification

Scans Cosmos SDK blockchain modules and CosmWasm contracts for consensus-critical vulnerabilities — chain halts, fund loss, state…

Implement CEGAR for synthesis and verification workflows

Analyze test coverage gaps. Use when user says "test coverage", "what's not tested", "coverage gaps", "missing tests", "coverage report"…

Calculates CRAP (Change Risk Anti-Patterns) for a named .NET method, class, or file.

Use when asked to create or update integration tests for any Flet control in sdk/python/packages/flet/integration_tests, including visual…

Cross-chain bridge and multi-chain development expertise.