Security & Testing Agent Skills for DeepSeek Harness

Detects typosquatting attacks in npm and PyPI package registries by

Implements code tasks using a strict Test-Driven Development (TDD) workflow to ensure high-quality, production-ready results.

Verifies implementation completion by running tests, linting, and coverage checks to generate comprehensive verification reports.

Systematically explore and test a web application to find bugs, UX issues, and other problems.

Switches Claude into specialized professional personas like security auditor, architect, or performance expert for evidence-based analysis.

Fix failing or flaky Playwright tests. Use when user says "fix test", "flaky test", "test failing", "debug test", "test broken", "test…

Generates cryptographically strong random secrets, passwords, passphrases, and identifiers on macOS using openssl rand, /dev/urandom, and…

Hyperflow debugging. Use for bugs, test failures, runtime errors, broken builds, or "this doesn't work" reports — verbs like debug, "fix…

Write multi-event correlation rules in Splunk SPL and Sigma format that

Automates the implementation of development tasks through a structured TDD workflow and integrated task management.

Use for authorized security assessment of LLM applications and AI agents, including prompt injection, tool abuse, RAG exposure, memory…

Migrate from Cypress or Selenium to Playwright.

Reviews product requirements documents across five specialized roles to identify completeness, consistency, and testability issues.

OWASP Agentic Security Top 10 (2026) vulnerability knowledge base for identifying, assessing, and remediating security risks in AI agent…

Test web applications for path traversal and Local/Remote File Inclusion

Meta's 86M prompt injection and jailbreak detector.

Use when measuring whether a PR introduces *new* pyright errors in touched files (as opposed to the repo's long-standing baseline).

Creates language variants of existing Semgrep rules.

Implement user stories with test-driven development methodology.

Switch to specialist role. Activate with "switch role", "as security specialist", "as architect".

Agent skill for tester - invoke with $agent-tester