Security & Testing Agent Skills for OpenAI Agents SDK

Use when measuring whether a PR introduces *new* pyright errors in touched files (as opposed to the repo's long-standing baseline).

Performs command-line binary analysis, reverse engineering, and security research using the radare2 toolchain.

Bootstrap pointer that installs the external repo-scan skill from a pinned, reviewable commit.

Creates language variants of existing Semgrep rules.

Implement user stories with test-driven development methodology.

Switch to specialist role. Activate with "switch role", "as security specialist", "as architect".

Identify a .NET project's test platform, framework, command mode, and SDK-style vs classic project system.

Agent skill for tester - invoke with $agent-tester

Generates Claude Code skills from the Trail of Bits Testing Handbook (appsec.guide), analyzing handbook pages and emitting SKILL.md files…

Scans TON (The Open Network) smart contracts for 3 critical vulnerabilities including integer-as-boolean misuse, fake Jetton contracts…

Searches and explores Burp Suite project files (.burp) from the command line.

Detects timing side-channel vulnerabilities in cryptographic code.

Test-driven development with red-green-refactor loop.

Use when implementing complex logic that needs test coverage - write the test first, watch it fail, write minimal code to pass; ensures…

View all tracked vulnerabilities and their current status

Guides authoring of high-quality YARA-X detection rules for malware identification.

This skill should be used when the user asks to "intercept HTTP traffic", "modify web requests", "use Burp Suite for testing", "perform…

Printing Press CLI for 1Password. Agent-safe command layer over the official 1Password CLI and SDK service-account workflows.

Execute a traceable acceptance campaign on one immutable candidate, normalize honest outcomes, hash replayable evidence, minimize…

Builds and runs code under AddressSanitizer to catch buffer overflows, use-after-free, and other memory errors during fuzzing or tests.

Apply Adobe security best practices for OAuth credentials, secret rotation,