Security & Testing Agent Skills for Claude Code

HIPAA-specific entrypoint for healthcare privacy and security work.

Standardizes high-speed link bench test workflows across AWG, oscilloscopes, DUTs, and LeCroy pre-processing controls.

HIPAA compliance directives for AI-assisted development.

Govern Huawei Cloud SWR (Software Repository for Container) — image retention policy, vulnerability scanning via VSS (Vulnerability Scan…

MUST USE for any real runtime debugging across ANY language or binary — crashes, silent failures, wrong responses, stuck processes, memory…

Test-driven development. Use when the user wants to build features or fix bugs test-first, mentions "red-green-refactor", or wants…

Use when proactively hunt for adversary abuse of legitimate system binaries

Write, execute, and assert HTTP requests safely using Hurl text files.

Drive and visually inspect a native GUI app (Iced, egui, GTK, winit…) on Hyprland through a headless output, leaving the user's desktop…

Scan the codebase for mission-critical (CbC-mandatory) files and propose cbc=mandatory .gitattributes tags for human ratification

Use when preparing an IEEE S&P (Oakland) artifact-evaluation submission after acceptance, including choosing among the Available…

Use when designing or auditing the evaluation of an IEEE S&P (Oakland) paper, including end-to-end attack demonstration…

Use when hardening the reproducibility of an IEEE S&P (Oakland) paper's evidence before submission, including environment pinning for…

CUSTOM NON-PUBLIC. Hash-only immut proofs (fingerprint only; file never uploaded). Use only for bespoke deployments that must not send…

Configures and deploys Palo Alto Networks next-generation firewalls end-to-end,

Write custom Semgrep SAST rules in YAML to detect application-specific

Guides teams through IT outages and security incidents, providing structured workflows for detection, containment, eradication, and…

Use when writing or reviewing code that processes user input — validates and sanitizes to prevent SQL injection, XSS, CSRF, and other…

Build F*, Pulse, and KaRaMeL from source (fstar2 branch) for use in a verification project

This skill enables automated penetration testing of web applications.

Interface-first, dependency-injected Python architecture - Protocols and Pydantic models in an `interfaces` package, implementations in a…