Security & Testing Agent Skills for Claude Desktop

Generates unit tests, integration tests, and E2E tests for React/Next.js applications.

Senior QMS Audit Expert for internal and external quality management system auditing.

Senior SecOps engineer skill for application security, vulnerability management, compliance verification, and secure development practices.

Use when the user asks for STRIDE threat modeling, DREAD risk scoring, data-flow-diagram threat analysis, or a quick secret scan — or when…

Sets a machine up with agentbox — a single bwrap wrapper that runs any coding-agent CLI (Claude Code, Pi, Codex) with the host environment…

Set up Claude Code hooks to block dangerous git commands (push, reset --hard, clean, branch -D, etc.) before they execute.

Set up performance benchmarks and CodSpeed harness for a project.

Autonomous AI pentester for web apps and APIs.

Perform thorough code reviews with security, performance, and maintainability analysis.

sharp-edges

Generate .shellcheckrc configuration with appropriate rules, exclusions, and severity settings for shell script linting.

Use when an AI coding agent has fixed a bug or modified API/backend logic and you need to prevent the same class of bug from recurring…

Apply modern web development best practices for security, compatibility, and code quality.

Sets up eval-driven development (EDD) for an agent-assisted feature — define capability and regression evals before coding, grade them…

Runs a two-pass vulnerability scan on a snippet, file, or diff — a static pattern pass across fixed categories (injection, secrets, auth…

Hardens a feature against attack before or while it's built — threat-model trust boundaries with STRIDE, apply the Always/Ask-First/Never…

Reviews code for security vulnerabilities across Go, TypeScript, PHP, and infrastructure config.

Audits an agent harness's own configuration — CLAUDE.md, .claude/settings.json, MCP server configs, hooks, and agent definitions — for…

Drives development with tests written before implementation code, in Go, TypeScript, PHP, or any language.

Generates comprehensive unit, table-driven, and concurrency tests for a given function or module — happy paths, error paths, boundary…

Comprehensive web quality audit covering performance, accessibility, SEO, and best practices.