Security & Testing Agent Skills for HTTP / API

Review OneKey PRs and diffs for security, correctness, concurrency, React/RN pitfalls, and repository-specific regressions.

This skill should be used when the user asks to "test API security", "fuzz APIs", "find IDOR vulnerabilities", "test REST API", "test…

Uses Chrome DevTools MCP for accessibility (a11y) debugging and auditing based on web.dev guidelines.

Perform a Cynical Review and produce a findings report.

Use when reviewing scripts, client components, bundles, or runtime behavior related to Avoid inline JavaScript.

Internal downstream skill for ctf-sandbox-orchestrator.

Define and enforce policies, access controls, and compliance rules over Semantica knowledge graphs.

Audit a test file or suite; produce a severity-ranked diagnostic report.

Execute Vitest and Playwright test suites with result collection and failure analysis.

Reference-only filter syntax for VSTest and MTP with MSTest, NUnit, xUnit v3, and TUnit.

Creates custom Semgrep rules for detecting security vulnerabilities, bug patterns, and code patterns.

Adversarial code review that breaks the self-review monoculture.

Scans Algorand smart contracts for 11 common vulnerabilities including rekeying attacks, unchecked transaction fees, missing field…

Detect dangerous ACL misconfigurations in Active Directory using ldap3

Perform static analysis of Android APK malware using apktool for resource decompilation, jadx for Java source recovery, and androguard for…

Parses API Gateway access logs (AWS API Gateway, Kong, Nginx) to detect

Use when the user asks to generate API tests, create integration test suites, test REST endpoints, or build contract tests.

Automotive Ethernet implementation and validation expertise

Bug → spec protocol. When a bug is found or a test fails, trace the cause, decide whether a new §V invariant would catch recurrence…

Cancel active UltraQA cycling workflow

Creates, syncs, audits and manages Prowler compliance frameworks end-to-end.