Security & Testing Agent Skills for VS Code

Skill Tester

Use when the user pastes AI-generated text, asks to strip invisible characters / ZWSP / Cyrillic homoglyphs, wants to clean metadata from…

Use when preparing for SOC 2 — trust criteria, evidence collection, and auditor readiness.

Run the SPARC Refinement and Completion phases — review code, improve test coverage, validate against specification, and generate…

Verifies code implements exactly what documentation specifies for blockchain audits.

Orchestrates professional security audits and bug bounty workflows using expert methodologies and extensive real-world vulnerability data.

Create a new Harbor task for evaluating agents.

Set up and use 1Password CLI (op). Use when installing the CLI, enabling desktop app integration, signing in (single or multi-account), or…

Hunt Microsoft SharePoint Server (2013/2016/2019/Subscription Edition) on-prem farms — anonymous endpoint enumeration, version disclosure…

Investigate supply chain attack artifacts including trojanized software

MITRE ATT&CK is a globally-accessible knowledge base of adversary tactics,

Queries Certificate Transparency logs via crt.sh and pycrtsh to detect

Analyzes UEFI bootkit persistence mechanisms including firmware implants

Parse Apache and Nginx access logs to detect SQL injection attempts,

Spearphishing simulation is a targeted social engineering attack vector

Configure AWS Verified Access to provide VPN-less zero trust network

This skill should be used when the user asks "how do I secure our package supply chain", "what is dependency confusion", "how do I stop…

Switch to expert role for specialized analysis.

Read-only health, security and cleanliness audit of this machine.

Repairs entire code modules or features through a rigorous five-phase protocol including dependency mapping, diagnostic reporting, and…

Test-driven development for a single behavior — write a failing test first, then the minimum implementation, then refactor.