Security & Testing Agent Skills for Gemini CLI

Honestly evaluate AI work quality using a two-axis scoring system.

Demonstrate self-hosted CI runner abuse (CICD-SEC-7, insecure system configuration) during an authorized assessment — abusing a…

Generate or revise Chinese software self-test reports in genuine DOCX format from Git commits, code diffs, requirements, or described…

Creates custom Semgrep rules for detecting security vulnerabilities, bug patterns, and code patterns.

Senior CAPA Officer specialist for managing Corrective and Preventive Actions within Quality Management Systems.

Senior GDPR/DSGVO expert and internal/external auditor for data protection compliance.

Senior Information Security Manager specializing in ISO 27001 and ISO 27002 implementation for HealthTech and MedTech companies.

Generates unit tests, integration tests, and E2E tests for React/Next.js applications.

Senior QMS Audit Expert for internal and external quality management system auditing.

Senior SecOps engineer skill for application security, vulnerability management, compliance verification, and secure development practices.

Use when the user asks for STRIDE threat modeling, DREAD risk scoring, data-flow-diagram threat analysis, or a quick secret scan — or when…

Sets a machine up with agentbox — a single bwrap wrapper that runs any coding-agent CLI (Claude Code, Pi, Codex) with the host environment…

Set up Claude Code hooks to block dangerous git commands (push, reset --hard, clean, branch -D, etc.) before they execute.

Set up performance benchmarks and CodSpeed harness for a project.

Autonomous AI pentester for web apps and APIs.

Perform thorough code reviews with security, performance, and maintainability analysis.

sharp-edges

Generate .shellcheckrc configuration with appropriate rules, exclusions, and severity settings for shell script linting.

Use when an AI coding agent has fixed a bug or modified API/backend logic and you need to prevent the same class of bug from recurring…

Apply modern web development best practices for security, compatibility, and code quality.

Sets up eval-driven development (EDD) for an agent-assisted feature — define capability and regression evals before coding, grade them…