Security & Testing Agent Skills for OpenAI Agents SDK

Logic Challenger (Red Team) - Ask critical questions, find edge cases.

Security Auditor - Perform evidence-backed application, dependency, secret, and threat-model audits without silently modifying code.

Test Runner & Coverage - Design and run evidence-backed tests for requirements, regressions, and failure paths.

UAT Analyzer - Convert manual acceptance evidence into verified gaps, decisions, and scoped follow-up tasks.

Implementation Validator - Decide whether implementation satisfies spec, governance, build, runtime, and evidence gates.

Install a pre-commit hook that scans .specstory/history for secrets before commits.

Guides automated testing of SPIP plugins and squelettes using PHPUnit — the standard test tool for SPIP.

Spring Security best practices for authn/authz, validation, CSRF, secrets, headers, rate limiting, and dependency security in Java Spring…

Test-driven development for Spring Boot using JUnit 5, Mockito, MockMvc, Testcontainers, and JaCoCo.

Verification loop for Spring Boot projects: build, static analysis, tests with coverage, security scans, and diff review before release or…

When to activate: Spring Security, authentication, authorization, OAuth2 resource server, custom filters, UserDetailsService, security…

Remediates SQL injection security findings safely using validated execution plans, allowlisted tools, and strict outcome verification.

Provide systematic methodologies for automated SQL injection detection and exploitation using SQLMap.

Guides structured bug bounty and vulnerability research workflows across five core testing phases with curated playbooks and methodology.

SRE-focused security reasoning for designing, reviewing, and operating systems, automation, recovery mechanisms, operator workflows, and…

Execute this skill enables AI assistant to manage and monitor ssl/tls

Automate Sslmate Cert Spotter API tasks via Rube MCP (Composio).

Secure WebContainer deployments: CSP headers, sandbox isolation, input

Look up the latest TheFocus.AI standards, inspect the current (or named) project, and write a dated mapping report: how the project…

Run static analysis tools including SonarQube, ESLint, and multi-language linters

Deep static analysis of codebases for quality, complexity, and migration readiness assessment