Security & Testing Agent Skills

Use for authorized multi-stage attack-path planning and orchestration when a task spans reconnaissance, initial access, privilege…

Prepares codebases for security review using Trail of Bits' checklist.

Master authentication and authorization patterns including JWT, OAuth2, session management, and RBAC to build secure, scalable access…

Vehicle cybersecurity engineering per ISO/SAE 21434

Run Azure compliance and security audits with azqr plus Key Vault expiration checks.

Azure Key Vault Keys library for Rust. Create, manage, and use cryptographic keys including RSA, EC, and HSM-protected keys. Triggers…

Agent skill for benchmark-suite - invoke with $agent-benchmark-suite

Biocompatibility test selection and protocol recommendation skill based on device categorization

Git bisect to find the first bad commit by running a test command.

Configure a PreToolUse hook to prevent AI agents from skipping git pre-commit hooks with --no-verify and other bypass flags.

Apply Bright Data security best practices for secrets and access control.

Use when verifying frontend behavior at runtime — DOM validation, network inspection, performance profiling with browser DevTools

Use at the START of any bug bounty hunting session, when switching targets, or when feeling lost about what to do next.

Reproduce a bug from a Linear ticket with a failing test.

Architect redirectors with nginx and Apache, malleable profiles, and OPSEC

Searches and explores Burp Suite project files (.burp) from the command line.

Sets up and runs cargo-fuzz, the standard fuzzing tool for Cargo-based Rust projects.

Formal verification using Certora Prover with CVL specification language.

Ensure that the --service-account-private-key-file argument is set as appropriate (Manual)

Automate Codacy tasks via Rube MCP (Composio).

Agent skill for analyze-code-quality - invoke with $agent-analyze-code-quality