Security & Testing Agent Skills for Claude Desktop

Deploy MISP via Docker and configure feeds from sources like abuse.ch, AlienVault OTX, and CIRCL to aggregate, correlate, and distribute…

Implement a vulnerability aging dashboard and SLA tracking system that measures time-to-remediation against severity-based deadlines (e.g…

Deploy DefectDojo as a centralized vulnerability management dashboard that ingests findings from 200+ security scanners, deduplicates…

Build a vulnerability exception and risk acceptance tracking system covering approval workflows, compensating controls documentation, and…

Builds a structured vulnerability scanning workflow using tools like

Execute comprehensive web application security testing using Burp Suite's integrated toolset, including HTTP traffic interception and…

Discovering and accessing unprotected pages, APIs, and administrative

This skill should be used when the user asks to write, review, debug, optimize, test, fuzz, port, harden, profile, or design software in…

Use only when writing/updating/fixing C++ tests, configuring GoogleTest/CTest, diagnosing failing or flaky tests, or adding…

C# and .NET testing patterns with xUnit, FluentAssertions, mocking, integration tests, and test organization best practices.

Explore a codebase to find opportunities for architectural improvement, focusing on making the codebase more testable by deepening shallow…

Test-driven development with red-green-refactor loop.

Identify mission-critical (CbC-mandatory) code in a change, discharge its correctness claims through a pluggable verifier, record the…

On-chain analysis and transaction forensics for blockchain security investigations.

Use when planning, running, or learning from chaos engineering experiments.

Run chaos engineering experiments using Chaos Monkey, Litmus, or Gremlin

Generate characterization tests to capture and verify existing behavior before migration

This skill uses the owasp-compliance-checker plugin to automatically identify potential security vulnerabilities based on the OWASP Top 10…

Use when the user wants a serious checkpoint before continuing work, especially after meaningful implementation, refactor, audit…

Harden a CI/CD delivery pipeline against Insufficient Flow Control (CICD-SEC-1).

Detect and prevent self-hosted CI runner abuse (CICD-SEC-7).