Security & Testing Agent Skills for HTTP / API

Use when fixing bugs, refactoring, changing shared state, or reviewing a patch where behavior that already works could regress; triggers…

Generate a project-local verification skill that drives your app the way a user does — any language, framework, or platform.

Use when setting up nono to run Claude Code securely, creating or modifying nono profiles, adding per-session filesystem permissions, or…

Audit an Effect codebase for silent error swallowing -- catchAll patterns that collapse errors into sentinel values (null, [], false…

Expert multi-AI code review with inline PR comments — use for thorough quality and security analysis

OWASP compliance, vulnerability scanning, and adversarial red team testing — use for security reviews

Use when encountering any bug, test failure, or unexpected behavior, before proposing fixes

Use when implementing any feature or bugfix, before writing implementation code

Use when about to claim work is complete, fixed, or passing, before committing or creating PRs - requires running verification commands…

Write and run Odoo automated tests using TransactionCase, HttpCase, and browser tour tests.

Penetration testing, ethical hacking, and vulnerability assessment techniques for authorized security testing

Implement secure authentication, token management, and permission scoping

Audits web components and applications for WCAG 2.2 accessibility compliance, covering color contrast, semantic HTML, keyboard navigation…

Open-source pipeline: fork, sanitize, and package private projects for safe public release.

Inspect, patch, validate, publish, or confirm OpenClaw GHSA security advisories and private-fork state.

7-stage super workflow for GitHub repo audit, cleanup, PR review, and competitor analysis

Run deterministic OpenSkills end-to-end validation across runtime tests and example agents, then report tool calls, activation behavior…

Diagnose openskills-runtime execution failures in sandboxed paths (Landlock, seatbelt, native script execution, wasm execution) and…

Supply-chain security audit — Composer + npm dependency CVE check, license compatibility (GPL-compatible only), abandoned package…

Execute work units through the rigorous 4-phase Metaswarm cycle (Implement -> Validate -> Adversarial Review -> Commit) with independent…

This skill enables Claude to orchestrate complex test workflows using the test-orchestrator plugin.