Security & Testing Agent Skills for Claude Code

Open-source pipeline: fork, sanitize, and package private projects for safe public release.

Inspect, patch, validate, publish, or confirm OpenClaw GHSA security advisories and private-fork state.

7-stage super workflow for GitHub repo audit, cleanup, PR review, and competitor analysis

Run deterministic OpenSkills end-to-end validation across runtime tests and example agents, then report tool calls, activation behavior…

Diagnose openskills-runtime execution failures in sandboxed paths (Landlock, seatbelt, native script execution, wasm execution) and…

Supply-chain security audit — Composer + npm dependency CVE check, license compatibility (GPL-compatible only), abandoned package…

Execute work units through the rigorous 4-phase Metaswarm cycle (Implement -> Validate -> Adversarial Review -> Commit) with independent…

This skill enables Claude to orchestrate complex test workflows using the test-orchestrator plugin.

Evaluate execution with three-stage verification pipeline

Test a live OutSystems app after a change lands: run SQL against its Dev database (db_query), invoke server actions in the running app…

Automates software development overnight using Git hooks to enforce test-driven development (TDD).

Orchestrate OWASP-based application and API security reviews and route findings to the appropriate specialized security skill.

Apply when debugging. Trace each symptom to its root cause and fix it there; reproduce first, ask why until you reach it, resist nil-check…

Analyzes software binary patches to identify root causes of vulnerabilities, assess security regressions, and reproduce security findings.

Review payment data flows and engineering control evidence for a scoped PCI assessment, without claiming certification.

PCI DSS compliance assessment and reporting for cardholder data protection, SAQ automation, and ASV scan orchestration

When to activate: PCI DSS, PCI compliance, payment card security, cardholder data, SAQ, QSA, card data environment, tokenization, network…

Validate PCI-DSS compliance for payment card data security.

Orchestrates authorized penetration testing, vulnerability scanning, and security auditing across network and web targets using over 20…

Capture performance baselines before migration for regression comparison and SLA verification

Execute load testing, stress testing, and performance benchmarking.