Security & Testing Agent Skills for Devin Desktop

Analyze exploit intelligence for a vulnerability against the current repository

Get a context-aware remediation plan for a vulnerability with fix verification steps

Audit wallet security by analyzing token approvals, permissions, and

Automated SAST + dependency vulnerability scan.

Beginner-friendly reverse-engineering workflow for Wasm Reversing.

Comprehensive guide to auditing web content against WCAG 2.2 guidelines with actionable remediation strategies.

Detect broken access control — IDOR/BOLA and missing function-level checks — against a web application from authorization decisions…

Harden a web application's authentication and session management against takeover — rate limiting and lockout, MFA, credential-stuffing…

Find and prove cross-site request forgery in a web application during an authorized assessment.

Find and prove insecure direct object reference / broken object-level authorization (BOLA) in a web application during an authorized…

Confirm and safely demonstrate OS command injection in a web application during an authorized assessment.

Find and prove path traversal / local file inclusion in a web application during an authorized assessment.

Detect path traversal and local file inclusion attempts and success against a web application from request logs and file-access telemetry.

Comprehensive web quality audit covering performance, accessibility, SEO, and best practices.

Harden a web application by suppressing stack-leaking response headers and deploying the security header set (CSP, HSTS…

Confirm, characterize, and demonstrate the impact of SQL injection in a web application during an authorized assessment.

Detect SQL injection attempts and successful exploitation against a web application from logs, WAF events, and database telemetry.

Confirm and characterize XML external entity (XXE) injection in a web application during an authorized assessment.

Detect cross-site scripting attempts and successful injection against a web application using request telemetry, Content-Security-Policy…

Harden a web application against XML external entity (XXE) injection by disabling DTD and external-entity processing in every XML parser…

Master comprehensive testing strategies for smart contracts using Hardhat, Foundry, and advanced testing patterns.