Security & Testing Agent Skills for Claude Desktop

Parse Windows LNK shortcut files to extract target paths, MAC timestamps,

Vitest fast unit testing framework powered by Vite with Jest-compatible API.

Cross-cutting review of recent work — catches gaps between specialists.

Detect Broken Authentication abuse (API2:2023) against an API from auth-endpoint telemetry and token-validation events — invalid-signature…

Detect Broken Object Level Authorization (BOLA / API1:2023) abuse against a REST or GraphQL API from access logs, gateway telemetry, and…

Harden sensitive business flows against Unrestricted Access (API6:2023) and detect automated abuse.

Detect excessive data exposure (API3:2023) in an API from response telemetry and schema-diff analysis — endpoints returning sensitive…

Detect Broken Function Level Authorization abuse (BFLA / API5:2023) against an API from access logs and role/route telemetry…

API key generation, rotation, and management system

Find and prove mass assignment / Broken Object Property Level Authorization (API3:2023) in an API during an authorized test — setting…

Harden a REST or GraphQL API against Security Misconfiguration (API8:2023).

Threat-model, design, implement, and review secure APIs and API-facing workflows.

Harden a REST or GraphQL API against Server-Side Request Forgery (SSRF / API7:2023) and detect exploitation attempts.

Harden an application against Unsafe Consumption of APIs (API10:2023).

Secure Apify API tokens, configure proxy access, and protect Actor data.

Enterprise role-based access control for Apollo.io.

Secure AppFolio API credentials and tenant data.

Hardens application code, configurations, and delivery pipelines against common vulnerabilities and security risks.

[COMMUNITY] Generate an Australian Energy Sector Cyber Security Framework maturity assessment for energy-sector projects with IT, OT…

[COMMUNITY] Generate a Notifiable Data Breach (NDB) scheme response playbook under Privacy Act 1988 Part IIIC — eligible-data-breach test…

[COMMUNITY] Generate an ASD operational technology cyber security assessment for Australian Government and critical-infrastructure…