Security & Testing Agent Skills for ChatGPT

Remediates SQL injection security findings safely using validated execution plans, allowlisted tools, and strict outcome verification.

Execute comprehensive SQL injection vulnerability assessments on web applications to identify database security flaws, demonstrate…

Guides structured bug bounty and vulnerability research workflows across five core testing phases with curated playbooks and methodology.

SRE-focused security reasoning for designing, reviewing, and operating systems, automation, recovery mechanisms, operator workflows, and…

Generates and configures SSH keys on macOS, covering ed25519 key creation, passphrase storage in the login Keychain via ssh-add…

This skill should be used when the user asks to "pentest SSH services", "enumerate SSH configurations", "brute force SSH credentials"…

CI testing for WebContainer apps with Playwright browser tests.

Look up the latest TheFocus.AI standards, inspect the current (or named) project, and write a dated mapping report: how the project…

Integration with security-focused static analysis tools

Guides the agent on executing static security scanning, auditing code for shell injections, and verifying API credential masks.

Stay strictly inside the current working directory — do not read, search, list, navigate to, or take any inspiration from anywhere else on…

Apply STRIDE methodology to systematically identify threats.

Stryker mutation testing for assessing test suite quality and effectiveness

Use when delegated work needs runtime guardrails — constrain sub-agents with loop detection, circuit breakers, and escalating sandbox…

Suede Labs AI eval design and coverage audit: AI-SPEC, failure-mode rubric with severity scoring, concrete pass/fail eval cases, coverage…

Suede Labs AI blunt A-F ship grade for a code change across correctness, security and permissions, data and state, domain truth, UX and…

Suede Labs AI MCP release QA, scoped to this pack's own server (mcp/suede-skills-mcp.mjs) and its catalog, install, and docs surface.

Create forensically sound bit-for-bit disk images using dd and dcfldd

Detect dangerous ACL misconfigurations in Active Directory using ldap3

Perform static analysis of Android APK malware samples using apktool

Parses API Gateway access logs (AWS API Gateway, Kong, Nginx) to detect