Security & Testing Agent Skills for Microsoft Copilot

Identifies and exploits insecure local data storage vulnerabilities

Identifies and exploits IPv6-specific vulnerabilities including SLAAC

Exploits JWT algorithm confusion where the server's verification library trusts the alg named in the token header, by switching RS256 to…

Discovers and exploits mass assignment (autobinding) in REST APIs by injecting unexpected or hidden parameters (e.g. role, isAdmin, plan)…

Detects and exploits MS17-010 (EternalBlue), a critical remote code execution flaw in Microsoft's SMBv1 implementation, using Nmap's…

Exploits the noPac Active Directory privilege-escalation chain (CVE-2021-42278

Detects and exploits NoSQL injection vulnerabilities in MongoDB, CouchDB,

Identifying and exploiting OAuth 2.0 and OpenID Connect misconfigurations

Identifies and exploits SMB protocol vulnerabilities using Metasploit

Detects and exploits Server-Side Template Injection (SSTI) vulnerabilities

Exploits PHP type juggling vulnerabilities caused by loose (==) comparison

Testing WebSocket implementations for authentication bypass, cross-site

Performs systematic, hypothesis-driven exploration and debugging across complex codebases using tree-search algorithms and domain adapters.

This skill should be used when the user asks to "do some exploratory testing", "write a test charter", "explore this feature for bugs"…

Hunting skill for subdomain takeover vulnerabilities.

Generate deterministic, executable tests strictly from a canonical verification contract, with requirement traceability, test-oracle…

Extract, parse, and analyze Windows Event Logs (EVTX) using Chainsaw,

F# testing patterns with xUnit, FsUnit, Unquote, FsCheck property-based testing, integration tests, and test organization best practices.

Intelligent pattern selection for Fabric CLI.

Fail-closed safety patterns (S1–S13) for code that drives physical outputs — power supplies, current sources, electromagnets, pulse…

Secure Fathom API keys and handle meeting data privacy.