Security & Testing Agent Skills for Claude Desktop

Use when a user wants an AI assistant or coding agent to provide setup guidance, evaluation, review, improvement, recommendation…

Unified quality gates for Laravel projects; Pint, static analysis (PHPStan/Psalm), Insights (optional), and JS linters; Sail and non-Sail…

Quarantines an intermittently failing test behind a ticket with an owner and expiry, assigns a root-cause bucket from isolated reruns, and…

Proves the system works by writing and executing comprehensive test suites.

This skill should be used when the user asks to "check for race conditions", "find TOCTOU bugs", "analyze concurrency issues", "detect…

Security audit, hardening, threat modeling (STRIDE/PASTA), Red/Blue Team, OWASP checks, code review, incident response, and infrastructure…

Provide comprehensive techniques for attacking Microsoft Active Directory environments.

Evaluate agent behavior with versioned cases and explicit verifiers.

Audits GitHub Actions workflows for security vulnerabilities in AI agent integrations including Claude Code Action, Gemini CLI, OpenAI…

Use before responding to pressure for agreement, manufactured urgency, authority appeals, or requests to certify unsupported claims…

Provide comprehensive techniques for testing REST, SOAP, and GraphQL APIs during bug bounty hunting and penetration testing engagements.

Implement secure API design patterns including authentication, authorization, input validation, rate limiting, and protection against…

Build comprehensive attack trees to visualize threat paths.

Provide comprehensive techniques for penetration testing AWS cloud environments.

Analyze text and images for harmful content with customizable blocklists.

Azure Key Vault Keys Java SDK for cryptographic key management.

Run Playwright tests at scale with cloud-hosted browsers and integrated Azure portal reporting.

Expert in secure backend coding practices specializing in input validation, authentication, and API security.

Comprehensive patterns and techniques for analyzing compiled binaries, understanding assembly code, and reconstructing program logic.

Build production-ready Web3 applications, smart contracts, and decentralized systems.

Deepfake detection and media safety — detect AI-generated audio, images, video, and text, trace synthesis sources, apply watermarks…