Security & Testing Agent Skills for Claude Code

Secure secrets management practices for CI/CD pipelines using Vault, AWS Secrets Manager, and other tools.

Use when the user asks to set up secret management infrastructure, integrate HashiCorp Vault, configure cloud secret stores (AWS Secrets…

Use while the user is writing a new feature — a login flow, an API endpoint, a file upload, cookie handling, Keychain use, a call to an…

Hardens AWS IAM configurations to enforce least-privilege access, covering

Secures container registry images (ECR, ACR, GCR, Docker Hub) by scanning

Configures the security features of the Harbor open-source container registry - integrated Trivy scanning, Cosign and Notary content trust…

Hardens GitHub Actions workflows against supply chain attacks, credential

Audits and hardens process historian servers (OSIsoft PI, Honeywell PHD,

Designs and configures secure remote access to OT/ICS environments for

USAP agent skill for Security Architecture.

Security payloads, bypass tables, wordlists, gf pattern names, always-rejected bug list, and conditionally-valid-with-chain table.

Perform a comprehensive, adversarial security audit of a codebase, API, application, or system design.

Run and troubleshoot privacy-preserving, local DSPy RLM security audits for large legacy .NET codebases.

Comprehensive security auditing workflow covering web application testing, API security, penetration testing, vulnerability scanning, and…

URL validation and content sanitization for untrusted sources — use when handling external input safely

Adversarial defense layer for the mortgage plugin — protects against prompt injection, system prompt extraction, PII leakage, workflow…

PreToolUse security-anti-pattern hook for Claude Code.

PreToolUse security-anti-pattern hook for Claude Code.

AIDefence security layer with prompt injection blocking, input validation, sandboxed execution, output sanitization, and STRIDE threat…

Use when the user asks to perform security audits, penetration testing, vulnerability scanning, OWASP Top 10 checks, or offensive security…

Derive security requirements from threat models and business context.