Security & Testing Agent Skills for Claude Code

Assessing JSON Web Token implementations for cryptographic weaknesses,

Testing mastracode TUI features interactively in Konsole.

Tests authentication and authorization mechanisms in mobile application

Tests OAuth 2.0 and OpenID Connect implementations for authorization code

Design a layered, risk-based test strategy and verify behavior before declaring software complete.

Best practices for writing R package tests using testthat version 3+.

Testing reconnaissance — inventory all tests, frameworks, coverage, CI integration, and assess testing maturity for project takeover.

Use when creating or editing skills, before deployment, to verify they work under pressure and resist rationalization - applies…

Design test strategies and test plans. Trigger with "how should we test", "test strategy for", "write tests for", "test plan", "what tests…

Use when asked to validate, test, smoke-test, or run the course's notebook and code samples against a live Microsoft Foundry / Azure…

Write, run and debug Jest tests for the Relay JavaScript runtime in this repo — above all `RelayModernStore`, garbage collection and…

Sync tests with TestRail. Use when user mentions "testrail", "test management", "test cases", "test run", "sync test cases", "push results…

Skill for the Tests area of Securacy. 114 symbols across 19 files.

Spring Security best practices for authn/authz, validation, CSRF, secrets, headers, rate limiting, and dependency security in Java Spring…

Use when challenging ideas, plans, decisions, or proposals.

The TDD discipline: seams, the red → green loop, and the anti-patterns to delete.

Audits repository security — hardcoded secrets, dependency vulnerabilities, environment variable management, and authentication patterns.

Comprehensive security and correctness audit of a branch's changes.

Run Semgrep static analysis scan on a codebase using parallel subagents.

Map identified threats to appropriate security controls and mitigations.

Produce a threat model — assets, ranked threats, mitigations, accepted risks.