Security & Testing Agent Skills for DeepSeek Harness

Git bisect to find the first bad commit by running a test command.

Configure a PreToolUse hook to prevent AI agents from skipping git pre-commit hooks with --no-verify and other bypass flags.

Apply Bright Data security best practices for secrets and access control.

Use when verifying frontend behavior at runtime — DOM validation, network inspection, performance profiling with browser DevTools

Use at the START of any bug bounty hunting session, when switching targets, or when feeling lost about what to do next.

Reproduce a bug from a Linear ticket with a failing test.

Architect redirectors with nginx and Apache, malleable profiles, and OPSEC

Searches and explores Burp Suite project files (.burp) from the command line.

Burp Suite Professional is an HTTP interception proxy with numerous security testing features.

Scans Cairo/StarkNet smart contracts for 6 critical vulnerabilities including felt252 arithmetic overflow, L1-L2 messaging issues, address…

Formal verification using Certora Prover with CVL specification language.

Ensure that the --service-account-private-key-file argument is set as appropriate (Manual)

Automate Codacy tasks via Rube MCP (Composio).

Agent skill for analyze-code-quality - invoke with $agent-analyze-code-quality

Agent skill for reviewer - invoke with $agent-reviewer

Internal downstream skill for ctf-sandbox-orchestrator.

Compliance OS — meta-orchestrator that lets compliance teams CONFIGURE which frameworks apply, COMPUTE cross-framework control overlap…

Implement Microsoft's Enhanced Security Admin Environment (ESAE) tiered

CVE and CWE database querying and management

Use when a TRIPWIRE block message appears after a destructive command, when wiring the deletion guard on a new machine, or before any bulk…

Check every dependency in a package.json against live CVE databases and security advisories in real time — specifically targeting…