Security & Testing Agent Skills for Claude Code

This skill enables Claude to run and manage integration test suites.

This skill enables Claude to validate test suite quality by performing mutation testing.

This skill runs smoke tests to verify critical application functionality.

Runs real-user QA, manual test plans, UX bug hunts, build sign-off, bug filing, and bug triage for web or iOS/iPadOS apps.

When to activate: Rust security, unsafe code, input validation, secret handling, cryptography, supply chain, audit, injection prevention

Rust testing patterns including unit tests, integration tests, async testing, property-based testing, mocking, and coverage.

Scan project dependencies for known vulnerabilities and CVEs.

Guides the creation of robust, refactor-resistant automated tests using seam boundaries, descriptive naming, and DAMP principles.

Operate the Ryuumonbuchi MCP server for headless Ghidra reverse engineering.

Audit and safely harden authorized SaaS web applications across frameworks and hosting providers.

Use when the user requests authorized SSH or SFTP operations on a remote server.

Use when an agent may change state; bound authority, scope, and read-back.

Use this skill to prevent destructive operations when working on production systems or running agents autonomously.

Scan inputs for prompt injection, unsafe content, and adversarial attacks using AIDefence.

Robot safety system design and validation for industrial and collaborative robots

Accessibility audit skill for scanning, fixing, and verifying WCAG 2.2 Level A and AA compliance across React, Next.js, Vue, Angular…

Adversarial code review that breaks the self-review monoculture.

Use when assessing AI/ML systems for prompt injection, jailbreak vulnerabilities, model inversion risk, data poisoning exposure, or agent…

Use when planning, running, or learning from chaos engineering experiments.

Security leadership for growth-stage companies.

Use when assessing cloud infrastructure for security misconfigurations, IAM privilege escalation paths, S3 public exposure, open security…