Security & Testing Agent Skills

Enables ultra-granular, line-by-line code analysis to build deep architectural context before vulnerability or bug finding.

Implement audio data handling best practices for Deepgram integrations.

Security checklist for Solidity AMM contracts, liquidity pools, and swap flows.

Write production-grade Deno code with secure-by-default permissions, deliberate import and dependency strategy, testing conventions, and…

Full pre-merge audit of a dependency-update PR (Dependabot, Renovate, or a manual version bump) in ANY ecosystem — npm/pnpm/yarn, GitHub…

Audits project dependencies for security vulnerabilities, license compliance issues, outdated packages, and transitive dependency risk.

Software Composition Analysis (SCA) and dependency vulnerability scanning.

Proactively discover outdated and vulnerable dependencies, apply patch and safe minor updates in isolation, verify with tests, and…

Master major dependency version upgrades, compatibility analysis, staged upgrade strategies, and comprehensive testing approaches.

Deploys canary files (honeytokens) across file systems to detect ransomware

Deploys and configures CrowdStrike Falcon EDR agents across enterprise

Deploys and configures osquery for real-time endpoint monitoring using

Deploys and configures Tailscale (or self-hosted Headscale) as a WireGuard-based zero trust mesh VPN, setting up identity-aware ACLs, exit…

Resolve a deployment_id into the artifacts that make up one agentic deployment and build the evidence graph every other attestation skill…

Detects prompt injection using regex signature matching, heuristic scoring for structural anomalies, and DeBERTa-based transformer…

Deploys anomaly detection for OT/ICS environments using machine learning on OT network baselines, physics-based process models, and…

Detect API enumeration attacks (BOLA/IDOR, OWASP API1:2023) by writing SIEM

Detect lateral movement in Azure AD/Entra ID environments using Microsoft

Detect Azure service principal abuse in Microsoft Entra ID using KQL detection

Performs statistical analysis of Zeek conn.log connection intervals

Detect Business Email Compromise (BEC) fraud, where attackers impersonate