Security & Testing Agent Skills for Claude Code

Find and prove Broken Object Level Authorization (BOLA / API1:2023) in a REST or GraphQL API during an authorized assessment.

Configure perform API fuzzing to discover edge cases, crashes, and security

Provide comprehensive techniques for testing REST, SOAP, and GraphQL APIs during bug bounty hunting and penetration testing engagements.

Detect and close Improper Inventory Management (API9:2023) for a REST or GraphQL API.

Use for authorized security assessment of REST, GraphQL, WebSocket, or SOAP APIs, including discovery, authentication, authorization…

API security testing workflow for REST and GraphQL APIs covering authentication, authorization, rate limiting, input validation, and…

Test automate API endpoint testing including request generation, validation,

Auto-generate comprehensive API tests for REST and GraphQL endpoints with request/response validation

Comprehensive API testing for REST and GraphQL endpoints with contract validation

IyBBUEkgVmVyaWZ5IFRlc3QgU2tpbGwKQXV0b21hdGVkIHZlcmlmaWNhdGlvbiBjb21taXQgZnJvbSBNdWx0aS1BZ2VudCBzeXN0ZW0uCkRhdGU6IDIwMjYtMDQtMjQK

Production readiness checklist for AppFolio integrations.

Implement access control for multi-user Apple Notes automation.

Apply security best practices for Apple Notes automation scripts.

[COMMUNITY] Assess Austrian NISG obligations (BGBl.

[COMMUNITY] Generate an Australian Energy Sector Cyber Security Framework maturity assessment for energy-sector projects with IT, OT…

[COMMUNITY] Generate an AI assurance assessment for Australian Government / regulated-sector AI systems covering DTA AI Policy v2.0, ISO…

[COMMUNITY] Generate a DISP (Defence Industry Security Program) Member self-attestation pack covering E8 ML2, ISM applicability…

[COMMUNITY] Generate a DTA Digital Service Standard compliance assessment for Australian Government digital services against all 13…

[COMMUNITY] Generate an Australian energy-sector compliance architecture pack covering AER ring-fencing, AEMC NER/NGR, AEMO interfaces…

Mechanical guard that lists every existing test assertion or test declaration a diff removes — each hit is a parity event needing a…

Perform a scoped, non-destructive security assessment of a web application or API the user is authorized to test.