Security & Testing Agent Skills for VS Code

This skill enables Claude to generate realistic test data for software development.

Generates structured cyber threat intelligence reports at strategic,

Performs comprehensive, read-only security audits and threat modeling to identify vulnerabilities across your codebase and supply chain.

Investigates software bugs and incidents using hypothesis testing, data flow tracking, and systematic root cause analysis.

Hunt API security misconfiguration — mass assignment, prototype pollution, HTTP verb tampering.

Hunting skill for idor vulnerabilities. Built from 26 public bug bounty reports. Use when hunting idor on any target.

Finds exploitable application security vulnerabilities in code changes.

Use when scanning code, commits, git history, Docker images, or packages for hardcoded secrets, when editing credential-handling code…

Install ggshield as a hook so secrets are caught before they leak.

Use when reviewing GitHub Actions workflows for exploitable vulnerabilities — finds pwn-request patterns, expression injection, credential…

Use ghidra-cli for reverse engineering tasks: binary analysis, decompilation, function inspection, cross-reference analysis, pattern…

Generates tailored giskard.checks evaluation suites for RAG (Retrieval-Augmented Generation) systems.

Install a Claude Code PreToolUse hook that blocks dangerous git operations (force push, reset --hard, clean -f, branch -D, checkout…

Use when triaging or reviewing GitGuardian secret incidents already detected in the dashboard, when asked what is leaking in the org or…

Toolkit for interacting with and testing local web applications using Playwright.

Map AD/Okta groups to Glean document permissions using allowedGroups.

Pre-launch: All datasources indexed and searchable.

Token security: Indexing tokens have write access -- never expose in

Load only when the user runs /postmortem, at the end of a fix or debug session.

Use when writing or reviewing Go code that starts goroutines, holds a sync.Mutex/RWMutex, or closes channels - to enforce goroutine…

Orchestrated codebase audit. Maps surfaces, deep-dives each surface, groups findings into a coarse plan.md, then refactors and fixes in…