Security & Testing Agent Skills for Claude Code

Use when making an NDSS paper's results reconstructible — snapshotting live-network observations, pinning testbeds and toolchains…

Use when hardening a plan, spec, design, resume, or codebase before an expensive or hard-to-reverse commitment, or when asked to "red team…

Help users run a local Ethereum dev chain, write integration tests, fork networks, debug transactions, or replace Hardhat/Anvil with…

Capture credentials and sensitive data from network traffic during an authorized assessment, including via layer-2 adversary-in-the-middle.

Stop and detect layer-2 adversary-in-the-middle and credential sniffing on internal networks.

NIS2 Directive (EU 2022/2555) compliance for critical infrastructure entities, covering the 10 minimum security measures.

Enter "offline mode" — for security reasons, do NOT use any tool or command that touches the internet or an external network.

Use when product or application logic may contain contradictory states, mixed date or filter scopes, KPI/card mismatches, misleading…

Use when fixing bugs, refactoring, changing shared state, or reviewing a patch where behavior that already works could regress; triggers…

Generate a project-local verification skill that drives your app the way a user does — any language, framework, or platform.

Use when setting up nono to run Claude Code securely, creating or modifying nono profiles, adding per-session filesystem permissions, or…

Audit an Effect codebase for silent error swallowing -- catchAll patterns that collapse errors into sentinel values (null, [], false…

Expert multi-AI code review with inline PR comments — use for thorough quality and security analysis

OWASP compliance, vulnerability scanning, and adversarial red team testing — use for security reviews

Use when encountering any bug, test failure, or unexpected behavior, before proposing fixes

Use when implementing any feature or bugfix, before writing implementation code

Use when about to claim work is complete, fixed, or passing, before committing or creating PRs - requires running verification commands…

Write and run Odoo automated tests using TransactionCase, HttpCase, and browser tour tests.

Penetration testing, ethical hacking, and vulnerability assessment techniques for authorized security testing

Implement secure authentication, token management, and permission scoping

Audits web components and applications for WCAG 2.2 accessibility compliance, covering color contrast, semantic HTML, keyboard navigation…