Security & Testing Agent Skills for Devin Desktop

Traces ransomware cryptocurrency payment flows using blockchain analysis tools such as Chainalysis Reactor, WalletExplorer, and…

Analyzes structured and unstructured threat intelligence feeds to extract

Queries Certificate Transparency logs via crt.sh and pycrtsh to detect

Analyze a target's TLS configuration — negotiated protocol version, cipher suite, certificate chain, expiry, and downgrade vectors.

Generate domain permutations with dnstwist and check DNS resolution

Correlate Windows registry keys (USBSTOR, MountedDevices), Event Logs,

Parse Apache and Nginx access logs to detect SQL injection attempts,

Parses the Windows Amcache.hve registry hive with Eric Zimmerman''s

Analyzes Windows Security, System, and Sysmon event logs in Splunk to

Parse Windows Prefetch (.pf) files with the windowsprefetch Python

Analyze Windows Shellbag (BagMRU) registry artifacts with SBECmd and

Secure Anima and Figma tokens for design-to-code pipelines.

Implement data privacy, PII handling, and compliance patterns for Claude

Configure Anthropic enterprise organization management, Workspaces,

Implement content safety guardrails for Claude \u2014 input filtering,\n\

Apply Anthropic Claude API security best practices for key management,

Structured debugging session — reproduce, isolate, diagnose, and fix.

Use BEFORE responding when the user's request shows pressure to validate or agree ("tell them what they want", "make them happy"…

Find and prove Broken Function Level Authorization (BFLA / API5:2023) in an API during an authorized test — reaching administrative or…

Find and prove Broken Object Level Authorization (BOLA / API1:2023) in a REST or GraphQL API during an authorized assessment.

Configure perform API fuzzing to discover edge cases, crashes, and security