Security & Testing Agent Skills for Gemini CLI

Map an unfamiliar test program's active launch, flows, dependencies, variants, evidence, and durable product context.

Maps observed adversary behaviors, security alerts, and detection rules

Decompiles, modifies, repacks, and dynamically instruments Android APK applications using CLI tools like JADX, Apktool, and Frida.

Migrates reverse engineering symbols, offsets, and function names across binary versions using automated LLM-assisted diffing.

Use test-driven development when the user asks for test-first work, red-green-refactor, integration tests, or when a requested…

JVM dependency intelligence via Maven Tools MCP server.

Meme coin and token security audit — rug pull detection (honeypot, hidden mint, fee manipulation, LP lock bypass), Solana SPL token…

Implement comprehensive testing strategies with pytest, fixtures, mocking, and test-driven development.

Sign and verify Ethereum messages with Nethereum.

This skill should be used when the user asks "how do I test this when I do not know the expected output", "how do I test a search ranking…

⚠️ AUTHORIZED USE ONLY > This skill is for educational purposes or authorized security assessments only. > You must have explicit, written…

Manage secrets using Azure Key Vault Secrets SDK for JavaScript (@azure/keyvault-secrets).

Performs comprehensive iOS application security assessments using Frida for dynamic instrumentation, Objection for runtime exploration…

Audit a port for everything that did NOT make it across — features, screens, commands, peripherals, protocol fields, config keys, assets…

Configure Mistral AI enterprise access control and workspace management.

Systematically finds and fixes bugs using proven debugging techniques.

Execute mobile app testing on iOS and Android devices/simulators.

Use cryptography correctly in a mobile app against OWASP Mobile Top 10 M10.

Abuse insecure deep links and inter-app entry points during an authorized mobile assessment.

Recover sensitive data a mobile app leaves on the device during an authorized mobile assessment.

Demonstrate Inadequate Privacy Controls (OWASP Mobile Top 10 M6) during an authorized mobile assessment — showing that an app collects…