Security & Testing Agent Skills for Claude Code

Automates binary reverse engineering and vulnerability assessment on PE and ELF files using headless IDA Pro and WPeGPT.

Detects hand-rolled optimistic-update plumbing in React code that should be using effect-atom's Atom.optimistic and Atom.optimisticFn…

Keep tests deterministic and Effect-aware.

Write tests that pin real behavior instead of implementation details, config values, or lucky samples.

Writes and maintains reliable Playwright end-to-end tests using accessible selectors (getByRole, getByLabel) and web-first assertions.

Write and run ryOS tests with Bun's native test runner (bun:test).

Master binary analysis patterns including disassembly, decompilation, control flow analysis, and code pattern recognition.

Master systematic debugging techniques, profiling tools, and root cause analysis to efficiently track down bugs across any codebase or…

Implement GDPR-compliant data handling with consent management, data subject rights, and privacy by design.

Implement comprehensive testing strategies using Jest, Vitest, and Testing Library for unit tests, integration tests, and end-to-end…

Master memory forensics techniques including memory acquisition, process analysis, and artifact extraction using Volatility and related…

Implement memory-safe programming with RAII, ownership, smart pointers, and resource management across Rust, C++, and C.

Master network protocol reverse engineering including packet analysis, protocol dissection, and custom protocol documentation.

Execute this skill enables AI assistant to automatically scan for xss

YARA rule creation, testing, and deployment

6-layer AI governance: safety gates, evidence-based debugging, anti-slack detection, and machine-enforced hooks.

This skill should be used when the user asks to "attack Active Directory", "exploit AD", "Kerberoasting", "DCSync", "pass-the-hash"…

This skill should be used when the user asks to "learn ethical hacking", "understand penetration testing lifecycle", "perform…

This skill should be used when the user asks to "test for HTML injection", "inject HTML into web pages", "perform HTML injection attacks"…

This skill should be used when the user asks to "automate SQL injection testing," "enumerate database structure," "extract database…

This skill should be used when the user asks to "identify web application vulnerabilities", "explain common security flaws", "understand…