Security & Testing Agent Skills for Claude Code

Sign Windows executables with Authenticode using signtool, supporting EV and standard certificates

This skill should be used when the user asks to "escalate privileges on Windows," "find Windows privesc vectors," "enumerate Windows for…

Analyze and update dependencies with vulnerability scanning.

Automate Wiz tasks via Rube MCP (Composio).

Applies comprehensive business logic vulnerability methodologies based on over 22,000 real-world security audit cases.

ALWAYS USE when asked to fix, rewrite, update, improve, modernize, show corrected code for, or explain existing MSTest tests or…

Apply STRIDE methodology to systematically identify threats.

Map identified threats to appropriate security controls and mitigations.

Conduct WCAG 2.2 accessibility audits with automated testing, manual verification, and remediation guidance.

Test smart contracts comprehensively using Hardhat and Foundry with unit tests, integration tests, and mainnet forking.

You are a frontend security specialist focusing on Cross-Site Scripting (XSS) vulnerability detection and prevention.

Migrate .NET test projects from xUnit.net (v2 or v3) to MSTest v4.

Test-driven development with red-green-refactor loop.

(ywc) Use when implementation is complete and before creating a PR, to validate code against the spec or run a comprehensive quality review.

This skill should be used when the user asks to "use Metasploit for penetration testing", "exploit vulnerabilities with msfconsole"…

This skill should be used when the user asks to "test for SQL injection vulnerabilities", "perform SQLi attacks", "bypass authentication…

This skill should be used when the user asks to "analyze network traffic with Wireshark", "capture packets for troubleshooting", "filter…

Debug production and development failures with a hypothesis loop instead of shotgun edits.

Security leadership for growth-stage companies.

Security audit, hardening, threat modeling (STRIDE/PASTA), Red/Blue Team, OWASP checks, code review, incident response, and infrastructure…

Ensure to Regularly Patch Systems