Security & Testing Agent Skills for Claude Code

AUTHORIZED USE ONLY: This skill contains dual-use security techniques.

Identify and exploit file path traversal (directory traversal) vulnerabilities that allow attackers to read arbitrary files on the server…

Provide systematic methodologies for identifying and exploiting Insecure Direct Object Reference (IDOR) vulnerabilities in web applications.

Configure mutual TLS (mTLS) for zero-trust service-to-service communication.

Implement proven methodologies and tool workflows from top security researchers for effective reconnaissance, vulnerability discovery, and…

Conduct comprehensive SSH security assessments including enumeration, credential attacks, vulnerability exploitation, tunneling…

Use when encountering any bug, test failure, or unexpected behavior, before proposing fixes

Test-Driven Development workflow principles.

Test-driven development. Use when the user wants to build features or fix bugs test-first, mentions "red-green-refactor", or wants…

To test local web applications, write native Python Playwright scripts.

Generate comprehensive, meaningful tests for a given piece of code

Help users implement Sign-In with Ethereum (EIP-4361) authentication using Nethereum (.NET).

Generate and run a coder-eval activation suite for a Claude Code skill.

Pre-install security scanner for AI agent skills. 7.5% of 14,706 skills are malicious.

Forensic audit of software repositories and technical IP for economic valuation (R&D Cost, IP Value, Acqui-hire).

Visualize whether skills, rules, and agent definitions are actually followed — auto-generates scenarios at 3 prompt strictness levels…

Use when writing or reviewing skills to ensure no internal, confidential, or proprietary information is embedded

Advanced Content Security Policy bypass techniques.

Assess skill effectiveness from relevant agent history or scoped execution evidence.

Codifies the review output format and methodology so any agent performing fact-checking or review produces consistent, structured output.

Production-grade security and compliance engineering process for software applications developed, deployed, or operated in India (DPDP…