Security & Testing Agent Skills for OpenAI Agents SDK

Conduct a defensible cybersecurity risk assessment using the NIST SP 800-30 Rev 1 methodology: prepare scope and a risk model, identify…

This skill should be used when the user says "configure hooks", "set up quality gates", "add PostToolUse hook", "set up permission hooks"…

A skill with consecutive hyphens in the name.

Build or adapt a local harness to drive, inspect, and profile an interactive CLI or TUI without external services.

Use when testing, fixing, or extending the OpenClaw Control UI GUI with Vitest + Playwright end-to-end checks, mocked Gateway WebSocket…

Implement secure authentication in Convex with user management and access control.

Spin up a live local Omnigent server and exercise the GitHub Copilot SDK harness end-to-end — build copilot agents, run real turns…

Comprehensive security code review workflow for a target repository, producing a markdown report with findings and recommendations.

Crabbox/Testbox remote proof for OpenClaw: trusted-source routing, untrusted isolation, Linux/macOS/Windows/WSL2, live E2E, desktop…

Generate a project-local verification skill that drives your app the way a user does — any language, framework, or platform.

Cross-product troubleshooting of user connectivity issues spanning ZPA, ZIA, ZDX, and ZCC.

/cs:aims-audit <scope> — ISO/IEC 42001 AIMS internal-audit 6-question forcing interrogation.

/cs:compliance-readiness <program> — Multi-framework compliance officer 6-question forcing interrogation of any compliance program.

Spin up a live local Omnigent server and exercise the Cursor SDK harness end-to-end — build cursor agents, run real turns, smoke-test, and…

Set up and run USB traffic capture with a Cynthion USB analyzer.

Cypress testing patterns, custom commands, component testing, and CI integration.

Best practices for using `expect` and `package:matcher`.

Run what this repository already defines (examples—substitute from package.json scripts, Makefile, CI config): Record in…

Production-ready authentication framework for TypeScript with first-class Cloudflare D1 support.

Performs comprehensive C/C++ security review for memory corruption, integer overflows, race conditions, and platform-specific…

Scans Cairo/StarkNet smart contracts for 6 critical vulnerabilities including felt252 arithmetic overflow, L1-L2 messaging issues, address…