Security & Testing Agent Skills for HTTP / API

Generate mock data and test fixtures from schemas

You are an expert Rails model test developer.

REQUIRED and PRIMARY testing approach for packages/playground and packages/playground-ui.

Protect production environment files while allowing safe access to dev and QA configurations.

Run the Gauntlet Loop: analyze, plan, build, independently critique/red-team/verify, revise, re-verify, and judge until PASS, FAIL, or the…

Review multi-tenant AI deployments for cross-tenant context leakage, LoRA adapter contamination, shared inference worker risks, system…

This is a multiline description. It spans multiple lines. And should be normalized.

Mutation testing to verify test quality with Stryker, mutmut, or go-mutesting

Configure Navan admin roles, travel policies, approval workflows, and

Use when deciding whether a security project belongs at NDSS — the Network and Distributed System Security Symposium — or should route to…

.NET testing patterns — xUnit conventions, integration tests with WebApplicationFactory over Testcontainers, NSubstitute mocking, and test…

Reduce and fence off a network's exposed attack surface so discovery and exploitation have little to reach.

Dense description covering ARP spoofing, LLMNR/NBT-NS/mDNS poisoning, DNS poisoning, MITM attacks, VLAN hopping, DHCP attacks, 802.1X/NAC…

Demonstrate data exfiltration and C2 over permitted egress channels during an authorized network assessment — showing that with…

Harden the outbound network boundary against exfiltration and C2 over permitted channels.

Detect and contain exploitation of exposed network services.

Move laterally from an initial foothold to additional hosts during an authorized assessment.

You are helping a penetration tester perform network reconnaissance and service

Demonstrate abuse of exposed remote-access services during an authorized network assessment — gaining a foothold through internet-facing…

Harden remote-access services against external-foothold abuse.

Enumerate reachable hosts, open ports, and running services during an authorized network assessment.