Security & Testing Agent Skills for Claude Code

Toolkit for interacting with and testing local web applications using Playwright.

Map AD/Okta groups to Glean document permissions using allowedGroups.

Pre-launch: All datasources indexed and searchable.

Token security: Indexing tokens have write access -- never expose in

Go testing patterns including table-driven tests, subtests, benchmarks, fuzzing, and test coverage.

Use when moving a repository from private to public.

Run and analyze Grafana Cloud k6 tests through the k6 CLI and read-only REST API.

Grafana k6

Security fundamentals for Grammarly API credential management.

Compares Trailmark code graphs at two source code snapshots (git commits, tags, or directories) to surface security-relevant structural…

Implement the minimal code needed to make failing tests pass in the TDD green phase.

Use when you need to keep PII out of Groq API calls, filter model responses, audit-log conversations, or track token cost and usage for a…

Use when you run Groq inference for multiple teams and need per-team model allow-lists, spending caps, rate limits, and key rotation…

Apply Groq security best practices for API key management and data protection.

Generate tests for a completed phase based on UAT criteria and implementation

Autonomous audit-to-fix pipeline — find issues, classify, fix, test, commit

Review source files changed during a phase for bugs, security issues, and code quality problems

Retroactively audit an executed AI phase's evaluation coverage — scores each eval dimension as COVERED/PARTIAL/MISSING and produces an…

Retroactively audit and fill Nyquist validation gaps for a completed phase

An enterprise-grade, AI-powered penetration testing automation CLI tool.

Smart contract development advisor based on Trail of Bits' best practices.