Security & Testing Agent Skills for HTTP / API

Demonstrate Security Misconfiguration (OWASP Mobile Top 10 M8) during an authorized mobile assessment — finding insecure platform and app…

Use when implementing any feature or bugfix, before writing implementation code

Monitors Modbus TCP traffic on SCADA and ICS networks to detect anomalous

Hunt NTLM/Negotiate information disclosure on internet-reachable IIS/SharePoint/Exchange.

Performs multi-agent parallel requirement reviews across completeness, consistency, and testability dimensions using five role-based…

Unified cloud security posture management across AWS, Azure, and GCP with normalized metrics and CIS benchmark comparison

Run Stryker mutation testing on the source files changed in the current branch (vs origin/master) across vitest packages.

Run Stryker mutation testing on a single source file and return a structured, token-frugal report that's pipeable to a follow-up…

Use when choosing native or multi-LLM handling for init, review, or security requests

Use when validating production readiness for a Navan API integration\

Analyze what a change could break beyond its diff and prove the central safety invariant with executable evidence.

Use when preparing an NDSS artifact for evaluation after conditional acceptance — targeting the Available, Functional, and Reproduced…

Use when designing or auditing the evaluation of an NDSS paper — attack demonstrations, defense evaluations under adaptive adversaries…

Use when making an NDSS paper's results reconstructible — snapshotting live-network observations, pinning testbeds and toolchains…

Use when hardening a plan, spec, design, resume, or codebase before an expensive or hard-to-reverse commitment, or when asked to "red team…

Help users run a local Ethereum dev chain, write integration tests, fork networks, debug transactions, or replace Hardhat/Anvil with…

Capture credentials and sensitive data from network traffic during an authorized assessment, including via layer-2 adversary-in-the-middle.

Stop and detect layer-2 adversary-in-the-middle and credential sniffing on internal networks.

NIS2 Directive (EU 2022/2555) compliance for critical infrastructure entities, covering the 10 minimum security measures.

Enter "offline mode" — for security reasons, do NOT use any tool or command that touches the internet or an external network.

Use when product or application logic may contain contradictory states, mixed date or filter scopes, KPI/card mismatches, misleading…