Security & Testing Agent Skills for HTTP / API

Use when hunting for threats in an environment, analyzing IOCs, or detecting behavioral anomalies in telemetry.

Run an E2E smoke test that installs rivetkit packages from npm in an isolated temp project, starts the hello-world counter actor, then…

Multi-agent adversarial verification with convergence loop.

Static Application Security Testing (SAST) for code vulnerability

Systematically finds and fixes bugs using proven debugging techniques.

Initialize CbC evidence/claim scaffolding and apply scanner-proposed cbc=mandatory git-attribute tags

Use this skill to prove a freshly installed project stack actually works before building anything real on it: generate the smallest…

MUST USE when an existing .NET test project was excluded from a .slnf/CI solution filter, disappeared from .sln/.slnx discovery, or lost…

Retrieve active cyber-threat intelligence — malware IOCs, C2 infrastructure, and CISA known-exploited vulnerabilities — filterable by…

Set up or repair Cisco SCC Firewall Manager with either a complete pipx runtime or a managed Ansible companion for an existing Homebrew…

Use the unprimed sub agent as a second set of eyes before accepting visual work — MANDATORY before declaring any user-reported visual bug…

Use when you suspect API keys, tokens, or passwords are hardcoded in source code or committed to git history — scans and guides safe…

Scan for exposed secrets/credentials/API keys

Secure secrets management practices for CI/CD pipelines using Vault, AWS Secrets Manager, and other tools.

When to activate: secrets, API keys, environment variables, Vault, AWS Secrets Manager, .env, secret rotation, credentials

Declaratively register API keys and service credentials a template needs so they appear in the agent sidebar settings UI and the…

Skill for the Securacymcp area of Securacy. 101 symbols across 20 files.

Security audit. Use when hunting secrets, reviewing auth, threat modeling, checking skill supply chain, or hardening an app before it goes…

Use when implementing authentication/authorization, securing user input, or preventing OWASP Top 10 vulnerabilities — including custom…

Use when designing or implementing software securely: define security requirements, threat-model a feature, choose secure defaults, design…

Production-grade secure file upload pipeline with multi-stage validation, malware scanning (ClamAV), hash-based duplicate detection, and…