Security & Testing Agent Skills for Claude Desktop

Demonstrate cloud identity persistence during an authorized cloud assessment.

Demonstrate cloud credential theft via the instance metadata service (IMDS) during an authorized cloud assessment.

Harden cloud workloads against instance-metadata (IMDS) credential theft and detect attempts.

Demonstrate cloud audit-logging tampering during an authorized assessment — showing that an attacker with sufficient IAM can blind the…

Demonstrate container-to-host escape from an over-privileged container during an authorized assessment — privileged mode, host namespace…

Discover and prove publicly exposed cloud object storage during an authorized assessment — world-readable/writable S3 buckets, GCS…

Demonstrate serverless-function privilege escalation during an authorized cloud assessment — abusing an over-permissioned execution role…

Detect and prevent publicly exposed cloud object storage (S3/GCS/Azure Blob).

Enforces disciplined test-driven development cycles through strict Red-Green-Refactor workflows and automated quality gate checks.

Build/fix features with test-first development, review, and doc sync.

Comprehensive quality verification: spec compliance, lint, type-check, tests, cross-layer data flow, code reuse, and consistency checks.

Multi-dimensional code assessment across security, quality, performance, and maintainability with confidence-gated reporting (>=80%) and…

Multi-dimensional code review across correctness, security, performance, and maintainability with confidence-gated reporting and…

Review representative Code2Skill main flows for closure / Lightweight review of whether the representative Code2Skill main processes are…

Configure CodeRabbit enterprise access control, seat management, and

Configure CodeRabbit for security-focused code review with secret detection

Audit a Codex home directory for control-plane drift, risky state, and cleanup opportunities across config, agents, hooks, skills…

Trigger machine account authentication with PetitPotam (MS-EFSR) and Coercer across MS-RPRN, MS-DFSNM, and MS-FSRVP to feed NTLM relay…

Enforce meta-cognitive honesty and hallucination guardrails.

Apply Cohere security best practices for API key management and access

Analyze code changes for security vulnerabilities using LLM reasoning and threat model patterns.