Security & Testing Agent Skills for Claude Code

When to activate: SOC 2, SOC2, trust service criteria, security audit, Type I, Type II, evidence collection, audit preparation, controls…

Performs Socratic requirement reviews by asking probing QA-focused questions to uncover unstated PRD assumptions and edge cases.

Verify code changes with repository-native checks and evidence before declaring completion.

Apply explicitly requested engineering-quality guidance to implementation and maintenance work.

Master smart contract security best practices, vulnerability prevention, and secure Solidity development patterns.

Use when debugging any bug, failing test, flaky behavior, performance regression, unexpected runtime behavior, or reviewing an existing…

Detects and alerts on prompt injection backdoors in agent identity files (SOUL.md) — runs as a startup check or background watcher.

Assist in constructing type soundness proofs using progress and preservation theorems

Comprehensive C++ code review for memory safety, modern C++ idioms, concurrency, and security.

Enforce TDD workflow for C++. Write GoogleTest tests first, then implement. Verify coverage with gcov/lcov.

Generate and run end-to-end tests with Playwright.

Comprehensive Go code review for idiomatic patterns, concurrency safety, error handling, and security.

Enforce TDD workflow for Kotlin. Write Kotest tests first, then implement. Verify 80%+ coverage with Kover.

Comprehensive Rust code review for ownership, lifetimes, error handling, unsafe usage, and idiomatic patterns.

Enforce test-driven development workflow.

Comprehensive testing strategies for test-driven development and ensuring high-quality Go code.

Red team tactics principles based on MITRE ATT&CK.

4-phase systematic debugging methodology with root cause analysis and evidence-based verification.

Test-Driven Development workflow principles.

Testing patterns and principles. Unit, integration, mocking strategies.

Advanced vulnerability analysis principles.