Security & Testing Agent Skills for Claude Code

Reverse engineers malware binaries using NSA''s Ghidra disassembler and

Reverse engineers .NET malware samples using the dnSpy decompiler and

Systematic binary reverse engineering toolkit.

Unified multi-dimensional code review with automated fix orchestration.

Review Playwright tests for quality. Use when user says "review tests", "check test quality", "audit tests", "improve tests", "test code…

Detect the test runner for a target directory, confirm the command with the user, run it, then write a markdown summary to…

ALWAYS USE before running .NET tests or answering with a test command or flags.

Guidelines and best practices for writing unit tests in the G2 visualization library, covering directory structure, testing patterns, and…

Hunt cloud / infrastructure misconfigurations.

Configure SalesLoft local development with API mocking and sandbox testing.

This skill enables Claude to perform comprehensive accessibility audits.

This skill enables Claude to automatically scan code and configuration files for potential data privacy vulnerabilities using the…

Main entry point for Prowler development - quick reference for all components.

Guides through Trail of Bits' 5-step secure development workflow.

Hardens code against vulnerabilities. Use when handling user input, authentication, data storage, or external integrations. Use when…

Use when the user asks to perform security audits, penetration testing, vulnerability scanning, OWASP Top 10 checks, or offensive security…

Security reconnaissance — full inventory of secrets management, IAM, dependencies, auth, encryption, audit logging, and compliance gaps.

Security audit of web projects (Laravel/PHP, Node/JavaScript/TypeScript, Python and apps with LLM/RAG/agents): detects the stack, runs…

LLM-powered semantic analysis of code diffs to detect business-logic trojans

Runs a Semgrep security scan over a codebase: detects languages, selects rulesets, presents the plan for explicit approval, then runs…

Audit a fleet of AWS security groups for the multi-hop lateral-movement path that no single ingress rule reveals.