Security & Testing Agent Skills for HTTP / API

Suspicious Communications and Anomalous System Behavior

Secure Attio API integrations -- token scoping, secret management,

Audit an existing Coval evaluation setup for coverage, misleading scores, missing evidence, judge validation and execution risk.

Build or continue an organized HTML map of a repository, audit one user-selected subsystem for architecture and code-quality problems, or…

Find and triage known vulnerabilities in authorized project dependencies, lockfiles, vendored packages, and container manifests.

Orchestrate a scoped, goal-backed multi-agent audit loop from one parent thread only when the audit is large or complex enough to benefit…

When to activate: audit preparation, audit readiness, evidence collection, control documentation, auditor management, compliance audit…

Expert security auditor for AI Skills and Bundles.

Support SOX 404 compliance with control testing methodology, sample selection, and documentation standards.

This skill enables Claude to audit access control implementations in various systems.

Systematically audit AWS S3 bucket permissions to identify publicly

Auditing Microsoft Entra ID (Azure Active Directory) configuration to

Audit AWS, Azure, and GCP environments against the CIS Foundations Benchmarks by running automated scans with tools like Prowler and…

Run Microsoft Entra ID tenant reconnaissance, token acquisition and manipulation, and federation backdoor testing with the AADInternals…

Pre-deployment security audit of Solidity smart contracts in a Foundry project.

Find over-permissive RBAC roles and service-account token abuse paths in Kubernetes using kubectl auth can-i, rbac-police…

Scan Model Context Protocol servers and tool metadata for poisoning, SSRF, and unauthenticated exposure.

Use when checking this repository's skills for security or quality issues before sharing them, or remediating findings across skills.

Monitors Certificate Transparency (CT) logs to detect unauthorized certificate

Use Intel CHIPSEC to assess platform firmware configuration, SPI flash write protection, BIOS lock, SMM/SMRR, and Secure Boot variable…

This skill should be used when the user asks "are our tests actually good", "is 100% coverage meaningful", "what is mutation testing"…