Security & Testing Agent Skills for Gemini CLI

Detect known malicious npm package versions and install-time supply-chain indicators in repositories, lockfiles, and node_modules.

Use when completing tasks, implementing major features, or before merging to verify work meets requirements

Expert in Odoo access control: ir.model.access.csv, record rules (ir.rule), groups, and multi-company security patterns.

Comprehensive Odoo testing toolkit for generating test skeletons, running test suites, creating mock data, and analyzing test coverage…

Penetration testing, ethical hacking, and vulnerability assessment techniques for authorized security testing

Hunting skill for ssrf vulnerabilities. Built from 15 public bug bounty reports including AWS metadata SSRF (HackerOne $25k Analytics PDF…

Audits web components and applications for WCAG 2.2 accessibility compliance, covering color contrast, semantic HTML, keyboard navigation…

Open-source pipeline: fork, sanitize, and package private projects for safe public release.

Author OpenClaw Docker E2E and live provider Docker lanes.

Inspect, patch, validate, publish, or confirm OpenClaw GHSA security advisories and private-fork state.

Data Handling for OpenEvidence.

Enterprise Rbac for OpenEvidence.

Security Basics for OpenEvidence.

Review OpenRouter integration for regulatory compliance (SOC2, GDPR,

Diagnose openskills-runtime execution failures in sandboxed paths (Landlock, seatbelt, native script execution, wasm execution) and…

Audits and validates AI agent operations to ensure security compliance and procedural integrity.

Hunt account takeover taxonomy — 9 distinct paths to ATO, plus chains.

Supply-chain security audit — Composer + npm dependency CVE check, license compatibility (GPL-compatible only), abandoned package…

Hunting skill for xxe vulnerabilities. Built from 10 public bug bounty reports including SVG-upload XXE, Office-doc (PPTX/DOCX) XXE, SOAP…

Test equipment integration for signal analysis (oscilloscope and logic analyzer)

Comprehensive OSINT methodology for external red-team operations and authorized attack-surface assessments.