Security & Testing Agent Skills for Claude Code

Detect and exploit second-order SQL injection vulnerabilities where malicious

This skill enables Claude to conduct a security-focused code review using the security-agent plugin.

Automates credential rotation for service accounts across Active Directory,

Performs security testing of SOAP web services by analyzing WSDL definitions

Performs tabletop exercises for SOC teams simulating security incidents

Simulates SSL stripping / HTTPS downgrade attacks using sslstrip, Bettercap, and mitmproxy in authorized lab environments to test HSTS…

Performs static analysis of Windows PE malware samples using PEStudio to examine file headers, imports, strings, and resources without…

Detects and extracts hidden data embedded in images, audio, and other media files using steganalysis tools such as StegDetect, zsteg…

Conduct a thick client application penetration test to identify insecure

Uses PyMISP (the official MISP REST API library) to create events with structured IOCs (IPs, domains, hashes, URLs), enrich them with…

Builds comprehensive forensic super-timelines using Plaso (log2timeline and psort) to correlate events across file system metadata, event…

Performs User and Entity Behavior Analytics (UEBA) to detect anomalous

This skill enables Claude to execute visual regression tests using tools like Percy, Chromatic, and BackstopJS.

Runs Nikto, an open-source web server and web application scanner,

Executes web cache deception attacks by exploiting path normalization

Comprehensive Perl security covering taint mode, input validation, safe process execution, DBI parameterized queries, web security…

Implement Perplexity PII handling, data retention, and GDPR/CCPA compliance patterns.

Configure Perplexity API key scoping, per-team model access, cost controls, and search domain restrictions for enterprise deployments.

Apply Perplexity security best practices for secrets and access control.

Create your first Persona identity verification inquiry and check its

Local development with Persona sandbox, ngrok for webhooks, mock verifications.