Security & Testing Agent Skills for Claude Code

Use for Vue.js testing. Covers Vitest, Vue Test Utils, component testing, mocking, testing patterns, and Playwright for E2E testing.

This skill should be used when the user asks to "test for broken authentication vulnerabilities", "assess session management security"…

This skill should be used when the user asks to "run pentest commands", "scan with nmap", "use metasploit exploits", "crack passwords with…

Use after generating code, after accepting AI suggestions, or when reviewing AI-written modules.

Migrate .NET test projects from xUnit.net v2 to xunit.v3 and fix v3 breaks.

Enumerate Entra ID with ROADrecon and acquire and exchange tokens with roadtx.

Augments Trailmark code graphs with external audit findings from SARIF static analysis results, weAudit annotation files, and…

Analyze text and images for harmful content using Azure AI Content Safety (@azure-rest/ai-content-safety).

Master Bash Automated Testing System (Bats) for comprehensive shell script testing.

Tests in real browsers via Chrome DevTools MCP.

Use when a C++ failure involves memory lifetime, undefined behavior, native crashes, or debugger-only state — debug with symbols…

This skill should be used when generating comprehensive test cases from PRD documents or user requirements.

When to activate: cloud security, IAM, AWS Security Hub, GuardDuty, CloudTrail, CSPM, SCP, shared responsibility, cloud posture management

Compliance OS — meta-orchestrator that lets compliance teams CONFIGURE which frameworks apply, COMPUTE cross-framework control overlap…

Compliance review against Dutch and EU law: GDPR/AVG, EU AI Act, accessibility (EAA/WCAG), NIS2, CRA, licensing.

Use when designing a new agent-tool-* / agent-harness-* CLI that reads API keys or secrets from the environment.

Create new ESLint rules for the @n8n/eslint-plugin-community-nodes package.

Use when about to claim work is complete, fixed, or passing, before committing or creating PRs — requires running verification commands…

Set up and run Deepsec vulnerability scans, triage, and CI gates.

Detect and triage exposed credentials, tokens, private keys, and sensitive configuration in an authorized repository or provided artifacts.

Extracts resources and JavaScript from any installed Electron app (`.asar` bundle), restoring original sources from `.js.map` files when…