Security & Testing Agent Skills for HTTP / API

Use when a codebase needs a formal security audit beyond a quick scan — applies OWASP Top 10 and STRIDE threat modeling from a CSO…

Reverse custom JavaScript or WASM virtual machines and risk engines.

Guidance for writing or reviewing pytest tests for a Python backend — use fixtures and parametrize instead of copy-pasted setup, test…

Setting up Duende User Management with IdentityServer: passwordless authentication (OTP, TOTP, passkeys), storage configuration, user…

When read-only E2E tests assert over shared, sweepable environment data ("the board shows > 0 results"), guarantee the data floor with an…

Audit developer experience (DX/UX) of a library or tool across four surfaces — CLI, programmatic library/API, server/service, and GitHub…

Configuring Dynamic Client Registration (DCR) in Duende IdentityServer: endpoint setup, authorization policies, custom validation with…

Secure cloud sandbox execution for AI coding agents using E2B.

Build reliable, fast, and maintainable end-to-end test suites that provide confidence to ship code quickly and catch regressions before…

Build reliable, fast, and maintainable end-to-end test suites that provide confidence to ship code quickly and catch regressions before…

Analyzes endpoint detection mechanisms and simulates evasion techniques for authorized red teaming and purple team assessments.

Apply ElevenLabs security best practices for API keys, webhook HMAC validation, and voice data protection.

Detonate granular AWS, Azure, GCP, and Kubernetes attack techniques to validate

This skill enables Claude to encrypt and decrypt data using various algorithms provided by the encryption-tool plugin.

Validate encryption implementations and cryptographic practices.

Systematic E2E testing workflow with evidence capture and reporting.

Use when writing, running, testing, debugging, reviewing, or modifying code, scripts, TeX, plots, local/remote commands, or SLURM jobs…

Env & Secrets Manager

Skill for environmental test campaign planning and execution

Systematically map and remove malware, backdoors, and attacker persistence

Automate Doppler Secretops tasks via Rube MCP (Composio).