Security & Testing Agent Skills for HTTP / API

Harden Pipeline-Based Access Controls against CICD-SEC-5.

Demonstrate CI/CD secret exfiltration (CICD-SEC-6, Insufficient Credential Hygiene) during an authorized assessment — recovering pipeline…

Detect and prevent CI/CD secret exposure (CICD-SEC-6).

Demonstrate Ungoverned Usage of Third-Party Services (CICD-SEC-8) during an authorized assessment — abusing the broad, unaudited access…

Use when Codex should ask Claude CLI for an adversarial challenge review that pressure-tests implementation direction, design choices…

Set up Python test environment in Claude Code for web where flox is unavailable.

Audit or refresh OpenClaw maturity scorecard docs from root taxonomy, maturity scores, and QA evidence artifacts without using maintainer…

Programmatic Clerk sign-in for e2e testing.

Expert patterns for Clerk auth implementation, middleware,

Implement session management and middleware with Clerk.

Enforces a strict Red-Green-Refactor cycle to ensure reliable software behavior and high test coverage before writing production code.

Use this skill when the user wants a review or security audit of code or documentation.

Comprehensive checklist for conducting thorough code reviews covering functionality, security, performance, and maintainability

Test authoring guidance

Use PROACTIVELY when auditing code quality, running security scans, assessing technical debt, reviewing code for production readiness…

Instructs AI coding agents to invoke CodeGuard MCP Server security rules before writing or reviewing code.

Comprehensive guide for setting up and configuring CodeQL code scanning via GitHub Actions workflows and the CodeQL CLI.

Ask Codex CLI (gpt-5.6-sol) to run local app verification that needs computer use, browser automation, simulators, screenshots, app…

QA the omo Codex Light edition (lazycodex / packages/omo-codex) itself, in strict isolation so ONLY our plugin is exercised, never the…

Compare screenshots to judge which image is less wrong, not to match a baseline.

Internal downstream skill for ctf-sandbox-orchestrator.