Security & Testing Agent Skills for HTTP / API

Conduct a thick client application penetration test to identify insecure

Uses PyMISP (the official MISP REST API library) to create events with structured IOCs (IPs, domains, hashes, URLs), enrich them with…

Builds comprehensive forensic super-timelines using Plaso (log2timeline and psort) to correlate events across file system metadata, event…

Performs User and Entity Behavior Analytics (UEBA) to detect anomalous

This skill enables Claude to execute visual regression tests using tools like Percy, Chromatic, and BackstopJS.

Runs Nikto, an open-source web server and web application scanner,

Executes web cache deception attacks by exploiting path normalization

Comprehensive Perl security covering taint mode, input validation, safe process execution, DBI parameterized queries, web security…

Implement Perplexity PII handling, data retention, and GDPR/CCPA compliance patterns.

Configure Perplexity API key scoping, per-team model access, cost controls, and search domain restrictions for enterprise deployments.

Apply Perplexity security best practices for secrets and access control.

Create your first Persona identity verification inquiry and check its

Local development with Persona sandbox, ngrok for webhooks, mock verifications.

Use when configuring CodeIgniter 4-specific security mechanisms - CSRF protection mode (cookie vs session), output escaping with esc()…

When to activate: PHP security, SQL injection, PDO prepared statements, mass assignment, CSRF, Blade XSS, password_hash, session fixation…

When to activate: PHPUnit, Pest, PHP testing, data providers, mocking, test doubles, Laravel testing, RefreshDatabase, feature tests, HTTP…

Design comprehensive test cases using PICT (Pairwise Independent Combinatorial Testing) for any piece of requirements or code.

Use whenever a server error with a structured payload flows into a UI error handler.

Find the actual cause of an admitted failure instead of a plausible one using a systematic empirical method grounded in Agans and Zeller…

Write code that resists attack — parameterizing rather than escaping, encoding for the right output context, checking authorization per…

Refute your own work before delivering it.