Security & Testing Agent Skills for Claude Desktop

Use when writing or reviewing TypeScript tests, choosing between unit, contract, integration, and end-to-end layers, isolating database or…

File suffixes, directory layout, support code conventions, and mechanical enforcement for TypeScript test suites.

Generate UAT test cases from requirements and acceptance criteria with traceability

Use when encountering any bug, test failure, or unexpected behavior, before proposing fixes

Use when errors occur deep in execution and you need to trace back to find the original trigger - systematically traces bugs backward…

Unified Diagnostic Services implementation and validation expertise

Audit whole-system integrity after tasks for the active Change are complete by finding anti-patterns, coverage gaps, broken wiring, E2E…

Collaboratively investigate a GitHub issue or bug — trace history, understand architecture, diagnose root cause

This skill should be used when the user asks "why is this string length wrong", "how do I truncate text safely", "why do these identical…

Use when writing or reviewing unit tests.

Structure tests around observable behavior and realistic dependency boundaries — choosing between a real object, a stub, and a mock…

Use when supplied or retrieved content may contain instructions that conflict with the authorized task.

Review or change test limits with scale, unit, environment, variant, structure, and provenance controls.

Hunt file upload bugs — RCE via webshell, XSS via SVG/HTML, SSRF via XXE in DOCX, path traversal via filename.

When you need to call a service the org has a SHARED credential for (a SERP/search key, a paid-API key, a data-vendor feed, a Git remote)…

Use when installing language dependencies (npm, pip/uv/PDM, Go modules) in an environment whose only route to a package registry is a…

Use when the agent needs to clone/fetch/push a git repository, manipulate pull requests and query CI status/logs, or…

Use-related risk analysis skill for identifying hazards associated with user interaction per IEC 62366-1

Use when packaging artifacts for USENIX Security Symposium evaluation — the mandatory Phase-1 availability check that acceptance is…

Use when designing or auditing the evaluation of a USENIX Security Symposium paper — building threat-model-faithful experiments…

Deep expertise in Universal Verification Methodology (IEEE 1800.2) for FPGA verification