Security & Testing Agent Skills for DeepSeek Harness

Implement comprehensive testing strategies with pytest, fixtures, mocking, and test-driven development.

Configure Static Application Security Testing (SAST) tools for automated vulnerability detection in application code.

Derive security requirements from threat models and business context.

Master smart contract security best practices to prevent common vulnerabilities and implement secure Solidity patterns.

Use when implementing a confirmed bug fix or a narrowly scoped corrective patch.

Principal Application Security Engineer specializing in React, Next.js, TypeScript, browser security, OWASP, web application security…

Performance and load testing with k6 and Locust.

Security and code protection rules. Use when working with user input, authentication, data storage, external integrations, as well as…

Enforces test doctrine where shape follows code not the pyramid: pushes logic into Flutter-free packages tested with pure package:test and…

Use this skill when the user wants to decide what information is worth believing: verify contested news or viral claims; audit technically…

This skill should be used when the user asks to "pentest AWS", "test AWS security", "enumerate IAM", "exploit cloud infrastructure", "AWS…

This skill should be used when the user asks to "perform cloud penetration testing", "assess Azure or AWS or GCP security", "enumerate…

This skill should be used when the user asks to "test for XSS vulnerabilities", "perform cross-site scripting attacks", "identify HTML…

This skill should be used when the user asks to "escalate privileges on Linux", "find privesc vectors on Linux systems", "exploit sudo…

This skill should be used when the user asks to "escalate privileges", "get root access", "become administrator", "privesc techniques"…

This skill should be used when the user asks to "search for exposed devices on the internet," "perform Shodan reconnaissance," "find…

This skill should be used when the user asks to "perform SMTP penetration testing", "enumerate email users", "test for open mail relays"…

This skill should be used when the user asks to "pentest WordPress sites", "scan WordPress for vulnerabilities", "enumerate WordPress…

Generate a project-local verification skill that drives your app the way a user does — any language, framework, or platform.

Ensure noexec option is set on /var/tmp partition to prevent executable binaries

Ensure X Window System is not installed