Security & Testing Agent Skills for HTTP / API

Test a live OutSystems app after a change lands: run SQL against its Dev database (db_query), invoke server actions in the running app…

Check compliance with OWASP Top 10 security risks and best practices.

Apply this skill whenever writing or reviewing code that handles user input, makes external API calls, scrapes websites, stores…

Orchestrate OWASP-based application and API security reviews and route findings to the appropriate specialized security skill.

When to activate: OWASP, security checklist, injection, XSS, IDOR, SSRF, security misconfiguration, vulnerability

Deep integration with OWASP ZAP for automated security scanning, vulnerability detection, and API security testing.

Expert skill for packet capture and analysis using libpcap/Wireshark.

Apply when debugging. Trace each symptom to its root cause and fix it there; reproduce first, ask why until you reach it, resist nil-check…

Apply Palantir Foundry security best practices for credentials, scopes,

Analyzes software binary patches to identify root causes of vulnerabilities, assess security regressions, and reproduce security findings.

Hunt shadow / zombie / undocumented API surface (OWASP API9 Improper Inventory Management) — enumerate the full API version history…

Master PCI DSS (Payment Card Industry Data Security Standard) compliance for secure payment processing and handling of cardholder data.

When to activate: PCI DSS, PCI compliance, payment card security, cardholder data, SAQ, QSA, card data environment, tokenization, network…

PCI DSS v4.0 payment card data security compliance, assessment, and implementation.

Provide a comprehensive checklist for planning, executing, and following up on penetration tests.

Provide a comprehensive command reference for penetration testing tools including network scanning, exploitation, password cracking, and…

Orchestrates authorized penetration testing, vulnerability scanning, and security auditing across network and web targets using over 20…

SDK performance benchmarking and regression detection

This skill enables Claude to design, execute, and analyze performance tests using the performance-test-suite plugin.

Designs and runs access review and certification campaigns-scoping,

Enumerate and audit Active Directory forest trust relationships using