Security & Testing Agent Skills for Claude Code

Performs systematic, hypothesis-driven exploration and debugging across complex codebases using tree-search algorithms and domain adapters.

This skill should be used when the user asks to "do some exploratory testing", "write a test charter", "explore this feature for bugs"…

Hunting skill for subdomain takeover vulnerabilities.

Generate deterministic, executable tests strictly from a canonical verification contract, with requirement traceability, test-oracle…

Extract, parse, and analyze Windows Event Logs (EVTX) using Chainsaw,

F# testing patterns with xUnit, FsUnit, Unquote, FsCheck property-based testing, integration tests, and test organization best practices.

Intelligent pattern selection for Fabric CLI.

Fail-closed safety patterns (S1–S13) for code that drives physical outputs — power supplies, current sources, electromagnets, pulse…

Secure Fathom API keys and handle meeting data privacy.

Comprehensive QA of a feature on the staging server — bugs, UX concerns, and questionable design decisions reported with 15-yr QA-engineer…

Expert guidance for ffuf web fuzzing during penetration testing, including authenticated fuzzing with raw requests, auto-calibration, and…

Answer questions about FIASSE v1.1 and SSEM from the bundled framework reference — definitions, principles (Securable Paradigm, Boundary…

PreToolUse protection blocking sensitive file access across 195+ patterns in 12 categories with bash pipeline analysis and multi-tool…

This skill should be used when the user asks to "test for directory traversal", "exploit path traversal vulnerabilities", "read arbitrary…

Skills for securing file handling, upload pipelines, and authoring defensive payloads.

End-to-end Android APK red-team pipeline — automated APK acquisition (Play Store + apkpure + apkmirror fallback), jadx decompilation…

Hunt SAML / SSO attacks. Patterns: XML Signature Wrapping (XSW) — modify Assertion while keeping Signature valid by relocating signed…

Hunt for a hidden threat on a system the user owns — malware/rootkit/backdoor on the running machine, OR a dev-inserted kill switch /…

This skill enables Claude to identify potential security misconfigurations in various systems and configurations.

Secure Finta fundraising data and investor information.

Configure Firecrawl team access control with per-key credit limits and