Security & Testing Agent Skills for Microsoft Copilot

Agent skill for security-manager - invoke with $agent-security-manager

Measures timing side channels in cryptographic implementations by running them, using dudect for statistical analysis and Timecop over…

Production implementation guide for new container image supply-chain security: OCI image signing, digest-first builds, GitHub artifact…

Audit a ContextOS proof-carrying run using RunContext, CompiledContext, ToolEnvelope, DecisionRecord, trace, scorecard, and ReplayPacket…

Audit, disable, and restore selected Windows AI features through reviewable registry and policy changes with explicit elevation and…

Guide for converting Apache JMeter tests to Gatling.

Correlates disparate security incidents, IOCs, and adversary behaviors

Comprehensive overview of ALL Coval platform resources, their hierarchy, relationships, API endpoints, and ID formats.

Activation requires either supplied .NET coverage reports/percentages/line, branch, or condition metrics, or an explicit request to…

Scaffolds eval.yaml evaluation specs for agent skills in the dotnet/skills repository.

Analyze environment variables in JavaScript/TypeScript projects.

Extracts protocol message flow from source code, RFCs, academic papers, pseudocode, informal prose, ProVerif (.pv), or Tamarin (.spthy)…

When to activate: encryption, hashing, bcrypt, argon2, AES, RSA, TLS, key management, cryptography, signing

/cs:ai-act-readiness <system> — EU AI Act 6-question forcing interrogation.

/cs:ciso-review <plan> — Risk-paranoid interrogation of any plan that touches data, compliance, or production access.

Content Security Policy configuration, nonces, and reporting.

Guides and automates complex binary analysis, reverse engineering, and CTF challenge solving across multiple platforms.

Reference: https://www.first.org/cvss/v4.0/specification-document Analyze the vulnerability and produce a CVSS v4.0 vector string with a…

Expert Cypress testing framework integration for browser-based end-to-end testing

Use when code has been written and needs validation before committing, or when the user asks for a code review or security check.

DART Test: unit tests, integration tests, CI validation, and debugging