Security & Testing Agent Skills for Claude Code

This skill should be used when building agent evaluation systems: deterministic checks, regression suites, multi-dimensional rubrics…

Go testing best practices including table-driven tests, test helpers, benchmarking, race detection, coverage analysis, and integration…

Full safety mode: destructive command warnings + directory-scoped edits. (gstack)

Survey any codebase as a senior advisor and produce prioritized, self-contained implementation plans for OTHER models/agents to execute.

Advanced Next.js patterns - middleware, Server Actions, caching with

Meta's 86M prompt injection and jailbreak detector.

Python testing best practices using pytest including fixtures, parametrization, mocking, coverage analysis, async testing, and test…

Autonomous multi-app QA sweep that drives template apps with Playwright MCP.

Hardens code against vulnerabilities. Use when handling user input, authentication, data storage, or external integrations. Use when…

Focused security audit of code, calibrated to surface real exploitable bugs and suppress theoretical findings.

Review Langfuse changes for SSRF, tenant isolation, secret handling, unsafe redirects or uploads, and RBAC drift.

Define and enforce policies, access controls, and compliance rules over Semantica knowledge graphs.

Create a Mastra project using create-mastra and smoke test the studio in Chrome using Chrome MCP server

Agent skill for implementer-sparc-coder - invoke with $agent-implementer-sparc-coder

Spring Security best practices for authn/authz, validation, CSRF, secrets, headers, rate limiting, and dependency security in Java Spring…

Drives development with tests. Use when implementing any logic, fixing any bug, or changing any behavior. Use when you need to prove that…

Use this skill when writing new features, fixing bugs, or refactoring code.

Use this skill to test strategy changes against a fresh test repository.

E2E testing for Clerk apps. Use with Playwright or Cypress for auth flow

Agent skill for tester - invoke with $agent-tester

Repository-grounded threat modeling that enumerates trust boundaries, assets, attacker capabilities, abuse paths, and mitigations, and…