Security & Testing Agent Skills for HTTP / API

Generates unit tests, integration tests, and E2E tests for React/Next.js applications.

Senior Quality Manager Responsible Person (QMR) for HealthTech and MedTech companies.

Senior Risk Management specialist for medical device companies implementing ISO 14971 risk management throughout product lifecycle.

Senior SecOps engineer skill for application security, vulnerability management, compliance verification, and secure development practices.

Use when the user asks for STRIDE threat modeling, DREAD risk scoring, data-flow-diagram threat analysis, or a quick secret scan — or when…

Secure SerpApi API keys and prevent credit abuse.

Audits Linux servers for configuration vulnerabilities, inspects exposed services, and applies safe, reversible hardening measures.

Set up an end-to-end test suite in any repo, following practices that make e2e a reliable per-PR gate: real flows over bypass, layered…

Sets a machine up with agentbox — a single bwrap wrapper that runs any coding-agent CLI (Claude Code, Pi, Codex) with the host environment…

Set up performance benchmarks and CodSpeed harness for a project.

Autonomous AI pentester for web apps and APIs.

Gate bounded commands on a multi-user AI/GPU host through scope, ownership, authorization, and resource controls.

Framework-level sharing and privacy for user-authored resources (dashboards, documents, forms, decks, etc.).

Use when adding or reviewing Bats tests for shell scripts, including fixtures, setup and teardown, exit-code assertions, output…

Use when an AI coding agent has fixed a bug or modified API/backend logic and you need to prevent the same class of bug from recurring…

Apply modern web development best practices for security, compatibility, and code quality.

Runs a tight four-phase loop — reproduce, isolate, diagnose, fix — to root-cause a single bug with evidence, not guesses.

Enforces a stop-the-line triage protocol across failure classes — test failures, build breaks, runtime errors, and production incidents…

Subjects a non-trivial decision to a fresh-context adversarial review before it stands, in-flight rather than as a post-hoc PR verdict.