Security & Testing Agent Skills

Unified cloud security posture management across AWS, Azure, and GCP with normalized metrics and CIS benchmark comparison

Use at the START of any bug bounty hunting session, when switching targets, or when feeling lost about what to do next.

Configures mewt or muton mutation testing campaigns — scopes targets, tunes timeouts, and optimizes long-running runs.

Run Stryker mutation testing on a single source file and return a structured, token-frugal report that's pipeable to a follow-up…

Use whenever auth, API keys, OAuth, tokens, secrets, or credential setup appears in n8n work.

Use when choosing native or multi-LLM handling for init, review, or security requests

Use when validating production readiness for a Navan API integration\

Web fuzzing with ffuf

Use when hardening a plan, spec, design, resume, or codebase before an expensive or hard-to-reverse commitment, or when asked to "red team…

Help users run a local Ethereum dev chain, write integration tests, fork networks, debug transactions, or replace Hardhat/Anvil with…

Prevent Ethereum hashing bugs in JavaScript and TypeScript.

Audit an Effect codebase for silent error swallowing -- catchAll patterns that collapse errors into sentinel values (null, [], false…

Expert multi-AI code review with inline PR comments — use for thorough quality and security analysis

OWASP compliance, vulnerability scanning, and adversarial red team testing — use for security reviews

Use when encountering any bug, test failure, or unexpected behavior, before proposing fixes

Use when implementing any feature or bugfix, before writing implementation code

Use when about to claim work is complete, fixed, or passing, before committing or creating PRs - requires running verification commands…

Write and run Odoo automated tests using TransactionCase, HttpCase, and browser tour tests.

Implement secure authentication, token management, and permission scoping

7-stage super workflow for GitHub repo audit, cleanup, PR review, and competitor analysis

Run deterministic OpenSkills end-to-end validation across runtime tests and example agents, then report tool calls, activation behavior…