Security & Testing Agent Skills for Gemini CLI

Audit a local repository, identify the highest-value defects or gaps, implement focused fixes, verify them, and leave a concise backlog or…

Pre-publish health check, retrofit, and audit workflow for GitHub repos.

Assess a public GitHub Skill, MCP server, agent, or small AI tool before installation by comparing its claims with static repository…

Generate test report. Use when user says "test report", "results summary", "test status", "show results", "test dashboard", or "how did…

Bug bounty report writing for H1/Bugcrowd/Intigriti/Immunefi — report templates, human tone guidelines, impact-first writing, CVSS 3.1…

Use when repository access or authentication setup may affect credentials or remote state.

Performs comprehensive secret scanning and security verification across Git history and tracked files before making private repositories…

Audit a GitHub repository's security posture and hardening gaps across branch protection, CODEOWNERS, GitHub Actions, publish/release…

Launch Oz cloud agents with computer use to reproduce UI-focused bug reports, capture visual evidence (a screen recording by default), and…

Verify every PRD functional requirement is implemented in the branch diff — map each FR to code/spec evidence or flag it MISSING/PARTIAL

Skill for aerospace requirements verification and validation matrix management

Resolve and cross-check a machine's public IP address through bounded external services with clear disagreement and network-failure…

Assists with security incident response, investigation, and remediation.

Retell AI data handling \u2014 AI voice agent and phone call automation.\n\

Retell AI security basics \u2014 AI voice agent and phone call automation.\n\

Use this skill before finalizing, sharing, exporting, publishing, deploying, or reviewing any reveal.js presentation.

Reversa's bug fixer: reproduces, investigates root cause, offers opt-in discussion, creates reproducible and regression tests, applies…

Audit the user's OWN project end-to-end for security vulnerabilities (known-CVE dependencies, injection, unsafe deserialization…

Reverse engineers iOS applications using Frida dynamic instrumentation

Reverse engineers Rust-compiled malware using IDA Pro and Ghidra, covering

Use when BI/data access needs review for permissions, ownership and operational reliability.