Security & Testing Agent Skills for Claude Code

Detect and contain exploitation of exposed network services.

Move laterally from an initial foothold to additional hosts during an authorized assessment.

You are helping a penetration tester perform network reconnaissance and service

Demonstrate abuse of exposed remote-access services during an authorized network assessment — gaining a foothold through internet-facing…

Harden remote-access services against external-foothold abuse.

Enumerate reachable hosts, open ports, and running services during an authorized network assessment.

Gain a foothold by exploiting an exposed, vulnerable network service during an authorized assessment.

Assess a network service's TLS/SSL configuration for weaknesses during an authorized assessment.

Bring a network service's TLS to a modern, hardened baseline and keep it there.

Agent Human Layer for ordinary Human-to-Agent repository work.

NextAuth.js (Auth.js) configuration including providers, adapters, session management, callbacks, and JWT handling.

Audit an Effect codebase for silent error swallowing -- catchAll patterns that collapse errors into sentinel values (null, [], false…

Nuxt 3 auth patterns with @clerk/nuxt - middleware, composables, server

Implements OAuth 2.0 and OpenID Connect authentication flows with proper security, token management, and common provider integrations.

Comprehensive Odoo security auditor for model access rules, HTTP route authentication, sudo() usage, SQL injection risks, and record rule…

Audits project dependencies for open-source license compatibility and compliance risks across multiple distribution models.

Continuously audit, live-test, and stress-test the current OpenClaw codebase across at least ten independently scoped subsystem lanes…

Prepare, snapshot, run, rerun, debug, or interpret OpenClaw Parallels guest install, onboarding, gateway smoke, and upgrade checks across…

Plan and run pre-release OpenClaw plugin validation across bundled plugins, package artifacts, lifecycle commands, doctor/fix, config…

Run, watch, debug, extend, or explain OpenClaw qa-lab and qa-channel scenarios, artifacts, and live lanes.

Triage, redact, clean up, and resolve OpenClaw GitHub Secret Scanning alerts in issues or PRs.