Security & Testing Agent Skills for VS Code

Detect excessive data exposure (API3:2023) in an API from response telemetry and schema-diff analysis — endpoints returning sensitive…

Detect Broken Function Level Authorization abuse (BFLA / API5:2023) against an API from access logs and role/route telemetry…

API key generation, rotation, and management system

Find and prove mass assignment / Broken Object Property Level Authorization (API3:2023) in an API during an authorized test — setting…

Harden a REST or GraphQL API against Security Misconfiguration (API8:2023).

Threat-model, design, implement, and review secure APIs and API-facing workflows.

Harden a REST or GraphQL API against Server-Side Request Forgery (SSRF / API7:2023) and detect exploitation attempts.

Harden an application against Unsafe Consumption of APIs (API10:2023).

Secure Apify API tokens, configure proxy access, and protect Actor data.

Enterprise role-based access control for Apollo.io.

Secure AppFolio API credentials and tenant data.

Hardens application code, configurations, and delivery pipelines against common vulnerabilities and security risks.

[COMMUNITY] Generate an Australian Energy Sector Cyber Security Framework maturity assessment for energy-sector projects with IT, OT…

[COMMUNITY] Generate a Notifiable Data Breach (NDB) scheme response playbook under Privacy Act 1988 Part IIIC — eligible-data-breach test…

[COMMUNITY] Generate an ASD operational technology cyber security assessment for Australian Government and critical-infrastructure…

[COMMUNITY] Generate a Privacy Impact Assessment (PIA) for Australian Government entities under Privacy Act 1988 s33D, assessing…

[COMMUNITY] Generate a Protective Security Policy Framework (PSPF) compliance assessment for Australian Government entities and…

[COMMUNITY] Generate a SOCI Act Critical Infrastructure Risk Management Program (CIRMP) governance and evidence pack for Australian…

[COMMUNITY] Generate a Canada Privacy Impact Assessment per the Privacy Act and TBS Directive on Privacy Impact Assessment…

[COMMUNITY] Assess EU AI Act (Regulation 2024/1689) compliance obligations, risk classification, and conformity requirements for AI systems

[COMMUNITY] Assess EU Cyber Resilience Act (CRA, Regulation 2024/2847) compliance obligations for products with digital elements placed on…