Security & Testing Agent Skills for Claude Desktop

Evaluate whether a business, operations, finance, logistics, construction, or Web3 application honestly represents its product maturity.

Automates binary reverse engineering and vulnerability assessment on PE and ELF files using headless IDA Pro and WPeGPT.

Detects hand-rolled optimistic-update plumbing in React code that should be using effect-atom's Atom.optimistic and Atom.optimisticFn…

Keep tests deterministic and Effect-aware.

Writes and maintains reliable Playwright end-to-end tests using accessible selectors (getByRole, getByLabel) and web-first assertions.

Write and run ryOS tests with Bun's native test runner (bun:test).

Write or modify tests in a project that uses the Testo PHP testing framework.

Build comprehensive attack trees to visualize threat paths.

Master end-to-end testing with Playwright and Cypress to build reliable test suites that catch bugs, improve confidence, and enable fast…

Implement comprehensive testing strategies with pytest, fixtures, mocking, and test-driven development.

Configure Static Application Security Testing (SAST) tools for automated vulnerability detection in application code.

Derive security requirements from threat models and business context.

Master smart contract security best practices to prevent common vulnerabilities and implement secure Solidity patterns.

Use when implementing a confirmed bug fix or a narrowly scoped corrective patch.

Principal Application Security Engineer specializing in React, Next.js, TypeScript, browser security, OWASP, web application security…

Performance and load testing with k6 and Locust.

Security and code protection rules. Use when working with user input, authentication, data storage, external integrations, as well as…

Enforces test doctrine where shape follows code not the pyramid: pushes logic into Flutter-free packages tested with pure package:test and…

Use this skill when the user wants to decide what information is worth believing: verify contested news or viral claims; audit technically…

This skill should be used when the user asks to "pentest AWS", "test AWS security", "enumerate IAM", "exploit cloud infrastructure", "AWS…

This skill should be used when the user asks to "perform cloud penetration testing", "assess Azure or AWS or GCP security", "enumerate…