Security & Testing Agent Skills for HTTP / API

Compile an informal task description into a deterministic Harness-Driven Delegation Specification with an automated validation loop, for…

Migrate from Cypress or Selenium to Playwright.

This skill should be used when building agent evaluation systems: deterministic checks, regression suites, multi-dimensional rubrics…

Analyze Playwright E2E test failure reports from CI.

Scans Solana programs for 6 critical vulnerabilities including arbitrary CPI, improper PDA validation, missing signer/ownership checks…

Scans Substrate/Polkadot pallets for 7 critical vulnerabilities including arithmetic overflow, panic DoS, incorrect weights, and bad…

Parse and analyze Cobalt Strike Malleable C2 profiles using dissect.cobaltstrike

Automated test equipment control and data acquisition skill for hardware validation, with VISA/SCPI instrument communication, test…

Identifying and exploiting Cross-Origin Resource Sharing misconfigurations

Switch to an expert role. Triggered with "change role", "as a security expert".

Use when CI tests fail on main branch after PR merge, when investigating flaky test failures, or when user provides a PR URL/number to…

Configures verified Git commit and tag signing on macOS, defaulting to SSH signing with ssh-keygen -Y and falling back to GPG only when a…

Drive one slice of behavior through red then green — a failing test on a confirmed seam, then the smallest code that passes it.

Run a comprehensive security review on code

(ywc) Use when about to claim that work is complete, tests pass, the build succeeds, a bug is fixed, requirements are met, or a subagent…

Builds and runs code under AddressSanitizer to catch buffer overflows, use-after-free, and other memory errors during fuzzing or tests.

Sets up and runs AFL++ for multi-core fuzzing of C/C++ projects built with afl-clang-fast or afl-gcc-fast.

Understand anti-reversing, obfuscation, and protection techniques encountered during software analysis.

Assess Broken Authentication (API2:2023) in an API during an authorized test — JWT verification flaws, weak or missing token expiry…

Analyze assertion quality, depth, variety, and false confidence in existing tests.

Identify a .NET project's test platform, framework, command mode, and SDK-style vs classic project system.