Security & Testing Agent Skills for Claude Desktop

Comprehensive web quality audit covering performance, accessibility, SEO, and best practices.

Harden a web application by suppressing stack-leaking response headers and deploying the security header set (CSP, HSTS…

Confirm, characterize, and demonstrate the impact of SQL injection in a web application during an authorized assessment.

Detect SQL injection attempts and successful exploitation against a web application from logs, WAF events, and database telemetry.

Confirm and characterize XML external entity (XXE) injection in a web application during an authorized assessment.

Detect cross-site scripting attempts and successful injection against a web application using request telemetry, Content-Security-Policy…

Harden a web application against XML external entity (XXE) injection by disabling DTD and external-entity processing in every XML parser…

Master comprehensive testing strategies for smart contracts using Hardhat, Foundry, and advanced testing patterns.

Use when building or reviewing web apps, Mozilla WebAppSec auth/sessions, whitelist input, output encoding, CSRF/TLS/CSP, safe uploads…

Configure Webflow enterprise access control \u2014 OAuth 2.0 app authorization,\n\

Review local git changes or an architecture document against the Security, Privacy, and Compliance pillar of Google's Cloud…

E2E testing for Windows native desktop apps (WPF, WinForms, Win32/MFC, Qt) using pywinauto and Windows UI Automation.

Configure code privacy and data retention policies.

Control what code and data Windsurf AI can access and process in your

Analyze and update dependencies with vulnerability scanning.

Configure enterprise SSO integration for Windsurf.

Implement team-wide Windsurf usage policies, code quality gates, and

Build, run and verify real Windows software from a Mac — including WPF and WinForms UI — using WinQuick's disposable Windows environments.

Sign, verify, and track fix-marker regressions over time using a deterministic Ed25519 witness manifest.

PLAN and GENERATE WJTTC (Championship-Grade) test suites for any project.

F1-inspired test EXECUTOR + reporter. Runs a test plan, finds and reproduces bugs, audits suite signal integrity, then files a WJTTC…