Security & Testing Agent Skills for Claude Desktop

This skill should be used when the user asks to "test for XSS vulnerabilities", "perform cross-site scripting attacks", "identify HTML…

This skill should be used when the user asks to "escalate privileges on Linux", "find privesc vectors on Linux systems", "exploit sudo…

This skill should be used when the user asks to "escalate privileges", "get root access", "become administrator", "privesc techniques"…

This skill should be used when the user asks to "search for exposed devices on the internet," "perform Shodan reconnaissance," "find…

This skill should be used when the user asks to "perform SMTP penetration testing", "enumerate email users", "test for open mail relays"…

This skill should be used when the user asks to "pentest WordPress sites", "scan WordPress for vulnerabilities", "enumerate WordPress…

Generate a project-local verification skill that drives your app the way a user does — any language, framework, or platform.

Ensure noexec option is set on /var/tmp partition to prevent executable binaries

Ensure X Window System is not installed

Ensure to Regularly Patch Systems

Ensure that all Namespaces have Network Policies defined (Automated)

Comprehensive web accessibility (a11y) audit and compliance skill.

Use when planning a bounded accessibility review before evaluation or release decisions.

Route a free-text agent-skill security finding to the one OWASP AST01-AST10 category that owns its root cause, separate that origin from…

Open security scanner for agentic infrastructure — agents, MCP, packages, blast radius, runtime, and trust across MCP discovery, CVEs…

Patterns and techniques for adding governance, safety, and trust controls to AI agent systems.

On-chain identity for OpenClaw agents — .null name, ETH↔Solana binding, verifiable agent identity without touching private keys

Enforces deterministic code-level safety boundaries, idempotency, human-in-the-loop approvals, and concurrency isolation in AI agent…

GAN-inspired Generator-Evaluator agent harness for building high-quality applications autonomously.

Local-evidence production readiness audit for shipped apps, pre-launch reviews, post-merge checks, and "what breaks in prod?" questions…

Use this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing…