Security & Testing Agent Skills for Claude Code

Internal downstream skill for ctf-sandbox-orchestrator.

Internal downstream skill for ctf-sandbox-orchestrator.

Compliance OS — meta-orchestrator that lets compliance teams CONFIGURE which frameworks apply, COMPUTE cross-framework control overlap…

Implement Microsoft's Enhanced Security Admin Environment (ESAE) tiered

Analyze environment variables in JavaScript/TypeScript projects.

CVE and CWE database querying and management

Use when a TRIPWIRE block message appears after a destructive command, when wiring the deletion guard on a new machine, or before any bulk…

Deploys Cloudflare Access with Cloudflare Tunnel for zero trust access to self-hosted apps, configuring identity-aware policies, device…

Implements code tasks using a strict Test-Driven Development (TDD) workflow to ensure high-quality, production-ready results.

Verifies implementation completion by running tests, linting, and coverage checks to generate comprehensive verification reports.

Systematically explore and test a web application to find bugs, UX issues, and other problems.

Switches Claude into specialized professional personas like security auditor, architect, or performance expert for evidence-based analysis.

Use when someone reports a defect in an existing codebase and needs the cause pinned before a fix: a bug, crash, wrong output, regression…

Generates cryptographically strong random secrets, passwords, passphrases, and identifiers on macOS using openssl rand, /dev/urandom, and…

Hyperflow debugging. Use for bugs, test failures, runtime errors, broken builds, or "this doesn't work" reports — verbs like debug, "fix…

Write multi-event correlation rules in Splunk SPL and Sigma format that

Automates the implementation of development tasks through a structured TDD workflow and integrated task management.

Use for authorized security assessment of LLM applications and AI agents, including prompt injection, tool abuse, RAG exposure, memory…

Audits .NET test mock usage by tracing each mock setup through the production code's execution path to find dead, unreachable, redundant…

Reviews product requirements documents across five specialized roles to identify completeness, consistency, and testability issues.

OWASP Agentic Security Top 10 (2026) vulnerability knowledge base for identifying, assessing, and remediating security risks in AI agent…