Security & Testing Agent Skills for OpenAI Agents SDK

Configures pfSense firewall rules, NAT policies, IPsec/OpenVPN tunnels,

Analyze cryptographic code to detect operations that leak secret data through execution timing variations.

Executes containment strategies to stop active adversary operations

Content moderation API integration using OpenAI Moderation, Perspective API, and others

Generate contract tests for API migrations with consumer-driven contracts and provider verification

This skill should be used when the user asks "why is production latency worse than our load test", "is this benchmark trustworthy", "how…

Interface with Coq proof assistant for formal verification

Scans Cosmos SDK blockchain modules and CosmWasm contracts for consensus-critical vulnerabilities — chain halts, fund loss, state…

Implement CEGAR for synthesis and verification workflows

Analyze test coverage gaps. Use when user says "test coverage", "what's not tested", "coverage gaps", "missing tests", "coverage report"…

Calculates CRAP (Change Risk Anti-Patterns) for a named .NET method, class, or file.

Use when asked to create or update integration tests for any Flet control in sdk/python/packages/flet/integration_tests, including visual…

Cross-chain bridge and multi-chain development expertise.

Review a feature across frontend, API, service, database, security, observability, testing, and deployment boundaries.

Execute comprehensive client-side injection vulnerability assessments on web applications to identify XSS and HTML injection flaws…

Cryptographic implementation analysis and validation for encryption algorithms, key sizes, and certificate management

/cs:gdpr-audit-prep <scope> — GDPR audit 6-question Article-cited forcing interrogation.

/cs:iso13485-audit-prep <scope> — ISO 13485 QMS audit 6-question forcing interrogation.

/cs:soc2-audit-prep <scope> — SOC 2 Type II readiness 6-question forcing interrogation.

Apply Customer.io security best practices.

Reference: https://cna.erlef.org/cve-criteria Verify the case specified by the user (or the current working case).