Security & Testing Agent Skills for ChatGPT

Agent skill for implementer-sparc-coder - invoke with $agent-implementer-sparc-coder

Spring Security best practices for authn/authz, validation, CSRF, secrets, headers, rate limiting, and dependency security in Java Spring…

Drives development with tests. Use when implementing any logic, fixing any bug, or changing any behavior. Use when you need to prove that…

Use this skill when writing new features, fixing bugs, or refactoring code.

Use this skill to test strategy changes against a fresh test repository.

E2E testing for Clerk apps. Use with Playwright or Cypress for auth flow

Agent skill for tester - invoke with $agent-tester

Repository-grounded threat modeling that enumerates trust boundaries, assets, attacker capabilities, abuse paths, and mitigations, and…

Complete security architecture overhaul for claude-flow v3.

A comprehensive verification system for Claude Code sessions.

Comprehensive truth scoring, code quality verification, and automatic rollback system with 0.95 accuracy threshold for ensuring…

Use this when: red-team my optimization metric, find ways to game my metric, metric pre-mortem, adversarial metric evaluation, gaming…

Use ONLY for code review and test write/review guidance in `packages/agent-core-v2` (the DI × Scope agent engine).

Independent local multi-model review for contested, security-sensitive, high-risk, or merge-critical plans and changes.

Harden Kubernetes RBAC to least privilege and detect abuse.

Launch a specific Coval evaluation with explicit cases and execution bounds.

Integrates LazyCat MicroServer authentication systems, including OIDC SSO, HTTP identity headers, public API routing, and API tokens.

Map modernization opportunities in a legacy codebase — identify unsupported dependencies, architecture seams, and migration paths using…

Expert HIPAA compliance assistant for healthcare and software contexts.

Exploits JWT algorithm confusion where the server's verification library trusts the alg named in the token header, by switching RS256 to…

License compliance checking and conflict detection