Security & Testing Agent Skills for Claude Code

Use when delegated work needs runtime guardrails — constrain sub-agents with loop detection, circuit breakers, and escalating sandbox…

Suede Labs AI eval design and coverage audit: AI-SPEC, failure-mode rubric with severity scoring, concrete pass/fail eval cases, coverage…

Suede Labs AI blunt A-F ship grade for a code change across correctness, security and permissions, data and state, domain truth, UX and…

Suede Labs AI MCP release QA, scoped to this pack's own server (mcp/suede-skills-mcp.mjs) and its catalog, install, and docs surface.

Create forensically sound bit-for-bit disk images using dd and dcfldd

Detect dangerous ACL misconfigurations in Active Directory using ldap3

Perform static analysis of Android APK malware samples using apktool

Parses API Gateway access logs (AWS API Gateway, Kong, Nginx) to detect

Queries Azure Monitor activity logs and sign-in logs via azure-monitor-query

Campaign attribution analysis involves systematically evaluating evidence

Monitor Certificate Transparency logs using crt.sh and Certstream to

Detect abnormal access patterns in AWS S3, GCS, and Azure Blob Storage

Analyzes intrusion activity against the Lockheed Martin Cyber Kill Chain

Investigate compromised Docker containers by analyzing images, layers,

Parse and analyze email headers to trace the origin of phishing emails,

Perform static and symbolic analysis of Solidity smart contracts using

Reverse engineer Go-compiled malware using Ghidra with specialized scripts

Detect and analyze heap spray attacks in memory dumps using Volatility3

Analyzes indicators of compromise (IOCs) including IP addresses, domains,

Uses the Linux Audit framework (auditd) with ausearch and aureport utilities

Examine Linux system artifacts including auth logs, cron jobs, shell