Security & Testing Agent Skills for HTTP / API

PreToolUse protection blocking sensitive file access across 195+ patterns in 12 categories with bash pipeline analysis and multi-tool…

This skill should be used when the user asks to "test for directory traversal", "exploit path traversal vulnerabilities", "read arbitrary…

This skill enables Claude to identify potential security misconfigurations in various systems and configurations.

Secure Finta fundraising data and investor information.

Scans Android APKs for Firebase security misconfigurations including open databases, storage buckets, authentication issues, and exposed…

Configure Firecrawl team access control with per-key credit limits and

Use when fixing software issues in a repository, including bug reports, failing tests, CI failures, compile errors, runtime errors…

Fix security vulnerabilities found by a Strix pentest (open-source CLI or app.strix.ai cloud) — triage by severity, patch the root cause…

Implement data handling for Flexport supply chain data including PII

Invoke this skill when you need to audit the codebase — find code smells, assess technical debt, identify cumulative complexity, detect…

Automate Fluxguard tasks via Rube MCP (Composio).

Apply Fly.io security best practices for secrets management, private

Tests web application URL parameters for Server-Side Request Forgery by probing cloud metadata endpoints (AWS/GCP/Azure at…

Expert usage of Foundry (Forge, Cast, Anvil, Chisel) for smart contract development, testing, and deployment.

Fraud risk assessment skill based on the fraud triangle with red flag detection

Assess FreePBX/Asterisk UCP login, astdb, webshell traps.

Expert in secure frontend coding practices specializing in XSS prevention, output sanitization, and client-side security patterns.

This skill enables Claude to perform automated fuzz testing on APIs to discover vulnerabilities, crashes, and unexpected behavior.

Builds and applies fuzzing dictionaries so a fuzzer can produce the keywords, magic bytes, and tokens a target expects.

Comprehensive fuzzing operations with AFL++, libFuzzer, and OSS-Fuzz integration

This skill should be used when the user asks to "verify code", "run verification", "check quality", "validate changes", or before creating…