Security & Testing Agent Skills for Claude Code

Use when triaging or reviewing GitGuardian secret incidents already detected in the dashboard, when asked what is leaking in the org or…

Toolkit for interacting with and testing local web applications using Playwright.

Map AD/Okta groups to Glean document permissions using allowedGroups.

Pre-launch: All datasources indexed and searchable.

Token security: Indexing tokens have write access -- never expose in

Load only when the user runs /postmortem, at the end of a fix or debug session.

Use when writing or reviewing Go code that starts goroutines, holds a sync.Mutex/RWMutex, or closes channels - to enforce goroutine…

Orchestrated codebase audit. Maps surfaces, deep-dives each surface, groups findings into a coarse plan.md, then refactors and fixes in…

Security fundamentals for Grammarly API credential management.

Implement the minimal code needed to make failing tests pass in the TDD green phase.

Use when you need to keep PII out of Groq API calls, filter model responses, audit-log conversations, or track token cost and usage for a…

Use when you run Groq inference for multiple teams and need per-team model allow-lists, spending caps, rate limits, and key rotation…

Apply Groq security best practices for API key management and data protection.

An enterprise-grade, AI-powered penetration testing automation CLI tool.

Implement security best practices for Guidewire InsuranceSuite including OAuth2, JWT handling, API roles, secure Gosu coding, and data…

Use when the user asks for a security analysis or audit of a project, or asks "is this safe?" — a website, a backend API, an iOS/macOS app…

Hardens Linux endpoints using CIS Benchmark recommendations for Ubuntu,

ACTIVATE THIS SKILL FOR ANY SHELL COMMAND OR FILE READ.

Sign Ethereum transactions with Ledger and Trezor hardware wallets using Nethereum.

Minimize the admission of containers with allowPrivilegeEscalation (Manual)

When to activate: HashiCorp Vault, secrets engine, auth method, dynamic secrets, lease, agent sidecar, KV store, PKI, AppRole