Security & Testing Agent Skills for Claude Desktop

Run a sequential three-tier code review on a finished implementation branch — Haiku (surface) → Sonnet (logic) → Opus (deep).

Iterative root-cause + fix agent workflow that gathers evidence (code/logs/tests/web), verifies the primary ROOT_CAUSE claim with…

Discover a single-page-app's hidden backend API from its public JS bundle, then test that API for broken access control / missing…

Use when writing, reviewing, or refactoring React component tests with Testing Library.

Guidance for writing or reviewing React unit tests — test observable behavior via Testing Library queries (role/label/text over test-id)…

Run authorized, evidence-backed Recon Workbench (rwb) workflows (doctor/authorize/plan/run/summarize/manifest/validate/reconcile) and…

Recovers deleted files from disk images and storage media using PhotoRec's

Enforces a disciplined Red-Green-Refactor (TDD) workflow in TypeScript/Node.js.

Use when planning or executing authorized red team engagements, attack path analysis, or offensive security simulations.

Adversarial claim verification. Before accepting any "it works / it's done / it's fixed" claim, construct the concrete input that would…

You are a compliance expert specializing in regulatory requirements for software systems including GDPR, HIPAA, SOC2, PCI-DSS, and other…

Streamlines HealthTech compliance by providing 12 specialized agents for ISO 13485, FDA, MDR, and GDPR standards.

Author, correlate, debug, and run Relampo YAML performance tests with the Relampo CLI.

Pre-release verification checklist. Validates features, tests, docs, security, and quality gates before shipping. Delegates to the…

Autonomous QA tester that systematically tests every rdst command via tmux harness, applies a quality rubric, and files bugs in beads

Provides step-by-step procedures for remediating Amazon S3 bucket

Testing against remote executors in integration tests.

Use when a symptom has an OBVIOUS causal root and the temptation is to patch the symptom — when a bug fix is masking the real issue, when…

Implement secure data handling on Replit: PostgreSQL, KV Database, Object

Audit a Replit App for persistence, Secrets, publishing, port, authentication, and deployment mistakes.

Audit a local repository, identify the highest-value defects or gaps, implement focused fixes, verify them, and leave a concise backlog or…