Generates Claude Code skills from the Trail of Bits Testing Handbook (appsec.guide), analyzing handbook pages and emitting SKILL.md files…
Scans TON (The Open Network) smart contracts for 3 critical vulnerabilities including integer-as-boolean misuse, fake Jetton contracts…
Searches and explores Burp Suite project files (.burp) from the command line.
Detects timing side-channel vulnerabilities in cryptographic code.
Performs security-focused differential review of code changes.
Verifies that git commits address security audit findings without introducing bugs.
Test-driven development with red-green-refactor loop.
Use when implementing complex logic that needs test coverage - write the test first, watch it fail, write minimal code to pass; ensures…
AI-powered adversarial UI testing via the browse CLI.
View all tracked vulnerabilities and their current status
Test Temporal workflows with pytest, time-skipping, and mocking strategies.
This skill should be used when the user asks to "intercept HTTP traffic", "modify web requests", "use Burp Suite for testing", "perform…
Test-Driven Development workflow for ALL Prowler components (UI, SDK, API).
Printing Press CLI for 1Password. Agent-safe command layer over the official 1Password CLI and SDK service-account workflows.
Execute a traceable acceptance campaign on one immutable candidate, normalize honest outcomes, hash replayable evidence, minimize…
Builds and runs code under AddressSanitizer to catch buffer overflows, use-after-free, and other memory errors during fuzzing or tests.
Apply Adobe security best practices for OAuth credentials, secret rotation,
Sets up and runs AFL++ for multi-core fuzzing of C/C++ projects built with afl-clang-fast or afl-gcc-fast.
Agent skill for authentication - invoke with $agent-authentication
Use when designing or reviewing an AI agent system that needs policy-based access controls, intent classification, tool-level rate…
Use for runtime policy enforcement and governance of AI agents with Microsoft's Agent Governance Toolkit (AGT).