Security & Testing Agent Skills for Devin Desktop

Harden an API against mass assignment / Broken Object Property Level Authorization (API3:2023) by binding only allowlisted…

Harden an API against Unrestricted Resource Consumption (API4:2023) with layered limits — gateway rate limiting, pagination and…

Harden a REST or GraphQL API against Security Misconfiguration (API8:2023).

Discover and characterize API Security Misconfiguration (API8:2023) during an authorized assessment — permissive CORS, verbose…

Prove Unrestricted Access to Sensitive Business Flows (API6:2023) during an authorized assessment — automating a business-critical flow…

Find and prove Server-Side Request Forgery (SSRF / API7:2023) in a REST or GraphQL API during an authorized assessment.

Harden a REST or GraphQL API against Server-Side Request Forgery (SSRF / API7:2023) and detect exploitation attempts.

Harden an application against Unsafe Consumption of APIs (API10:2023).

Assess Unrestricted Resource Consumption (API4:2023) in an API during an authorized test — missing rate limits, pagination caps…

Prove Unsafe Consumption of APIs (API10:2023) during an authorized assessment — a target application that blindly trusts data from a…

Enterprise role-based access control for Apollo.io.

End-to-end iOS red-team pipeline — IPA acquisition (App Store extraction, TestFlight, enterprise/ad-hoc sideload)…

Production readiness checklist for AppFolio integrations.

Secure AppFolio API credentials and tenant data.

Generates production-grade Appium mobile automation scripts for Android and iOS in Java, Python, or JavaScript.

Use when the user wants to audit Aptos Move smart contracts, scan Aptos-specific patterns including global storage model, resource…

[COMMUNITY] Generate an Australian Energy Sector Cyber Security Framework maturity assessment for energy-sector projects with IT, OT…

[COMMUNITY] Generate a Notifiable Data Breach (NDB) scheme response playbook under Privacy Act 1988 Part IIIC — eligible-data-breach test…

[COMMUNITY] Generate an ASD operational technology cyber security assessment for Australian Government and critical-infrastructure…

[COMMUNITY] Generate a Privacy Impact Assessment (PIA) for Australian Government entities under Privacy Act 1988 s33D, assessing…

[COMMUNITY] Generate a Protective Security Policy Framework (PSPF) compliance assessment for Australian Government entities and…