Define and enforce policies, access controls, and compliance rules over Semantica knowledge graphs.
This skill should be used when the user asks to "test API security", "fuzz APIs", "find IDOR vulnerabilities", "test REST API", "test…
Uses Chrome DevTools MCP for accessibility (a11y) debugging and auditing based on web.dev guidelines.
Perform a Cynical Review and produce a findings report.
Use when reviewing scripts, client components, bundles, or runtime behavior related to Avoid inline JavaScript.
Master Bash Automated Testing System (Bats) for comprehensive shell script testing.
Install Claude skills from GitHub repositories with automated security scanning.
Internal downstream skill for ctf-sandbox-orchestrator.
Guides systematic root-cause debugging. Use when tests fail, builds break, behavior doesn't match expectations, or you encounter any…
Automates relentless iterative development cycles using independent verification gates to ensure tasks are completed without human…
Security audit guidelines for web applications and REST APIs based on OWASP Top 10 and web security best practices.
Audit a test file or suite; produce a severity-ranked diagnostic report.
Creates custom Semgrep rules for detecting security vulnerabilities, bug patterns, and code patterns.
Set up, repair, or migrate to Cloudflare Turnstile bot verification in an existing frontend and backend, including server-side Siteverify.
Cross-vendor adversarial code review of the current branch.
Adversarial code review that breaks the self-review monoculture.
Detect dangerous ACL misconfigurations in Active Directory using ldap3
Perform static analysis of Android APK malware using apktool for resource decompilation, jadx for Java source recovery, and androguard for…
Automotive Ethernet implementation and validation expertise
Make a cloud account compliant with a security or industry framework using Prowler Cloud.
Debug issues methodically — use when stuck on errors, test failures, or unexpected behavior