Security & Testing Agent Skills

Testing WebSocket implementations for authentication bypass, cross-site

Performs systematic, hypothesis-driven exploration and debugging across complex codebases using tree-search algorithms and domain adapters.

Extract, parse, and analyze Windows Event Logs (EVTX) using Chainsaw,

Rules for tests that survive refactoring - real objects over mocks, DAMP setup, narrow assertions on state, behavior-named cases, no…

Secure Fathom API keys and handle meeting data privacy.

Expert AI auditor for FDA Food Safety (FSMA), HACCP, and PCQI compliance.

MiCA compliance evidence and stablecoin risk scoring.

Expert guidance for ffuf web fuzzing during penetration testing, including authenticated fuzzing with raw requests, auto-calibration, and…

PreToolUse protection blocking sensitive file access across 195+ patterns in 12 categories with bash pipeline analysis and multi-tool…

This skill should be used when the user asks to "test for directory traversal", "exploit path traversal vulnerabilities", "read arbitrary…

This skill enables Claude to identify potential security misconfigurations in various systems and configurations.

Secure Finta fundraising data and investor information.

Scans Android APKs for Firebase security misconfigurations including open databases, storage buckets, authentication issues, and exposed…

Configure Firecrawl team access control with per-key credit limits and

Use when fixing software issues in a repository, including bug reports, failing tests, CI failures, compile errors, runtime errors…

Fix security vulnerabilities found by a Strix pentest (open-source CLI or app.strix.ai cloud) — triage by severity, patch the root cause…

Implement data handling for Flexport supply chain data including PII

Invoke this skill when you need to audit the codebase — find code smells, assess technical debt, identify cumulative complexity, detect…

Automate Fluxguard tasks via Rube MCP (Composio).

Apply Fly.io security best practices for secrets management, private

Tests web application URL parameters for Server-Side Request Forgery by probing cloud metadata endpoints (AWS/GCP/Azure at…