Security & Testing Agent Skills for Gemini CLI

Use when reviewing a pull request - security-focused review following repo agent guidance for breaking changes, malicious patterns, and…

Secure Navan API credentials with OAuth 2.0 best practices, SSO/SAML,

Analyze what a change could break beyond its diff and prove the central safety invariant with executable evidence.

Use when preparing an NDSS artifact for evaluation after conditional acceptance — targeting the Available, Functional, and Reproduced…

Use when designing or auditing the evaluation of an NDSS paper — attack demonstrations, defense evaluations under adaptive adversaries…

Use when making an NDSS paper's results reconstructible — snapshotting live-network observations, pinning testbeds and toolchains…

This skill should be used when the user asks to "set up a web server", "configure HTTP or HTTPS", "perform SNMP enumeration", "configure…

Capture credentials and sensitive data from network traffic during an authorized assessment, including via layer-2 adversary-in-the-middle.

Contain and detect lateral movement across an internal network.

Stop and detect layer-2 adversary-in-the-middle and credential sniffing on internal networks.

When to activate: network security, firewall rules, VPC security groups, NACLs, WAF, DDoS protection, VPN, network segmentation, zero…

Expert integration of Supabase Auth with Next.js App Router

NIS2 Directive (EU 2022/2555) compliance for critical infrastructure entities, covering the 10 minimum security measures.

Enter "offline mode" — for security reasons, do NOT use any tool or command that touches the internet or an external network.

Use when product or application logic may contain contradictory states, mixed date or filter scopes, KPI/card mismatches, misleading…

Use when fixing bugs, refactoring, changing shared state, or reviewing a patch where behavior that already works could regress; triggers…

Generate a project-local verification skill that drives your app the way a user does — any language, framework, or platform.

Use for \"interrogate\", \"adversarial review\", \"multi-model review\", \"challenge this\", \"stress test this code\", \"find blind…

Periodic pass that keeps a project's verification skill and feature map honest: parallel source readers per feature, one live session…

Use when setting up nono to run Claude Code securely, creating or modifying nono profiles, adding per-session filesystem permissions, or…

Define data classification, minimization, retention, and deletion controls for a Notion integration.