Security & Testing Agent Skills for Zed

Probe a site's authentication flow for redirect leaks, missing CSRF, weak session cookies, and OAuth misconfiguration; produces an auth…

Test across multiple browsers and devices for cross-browser compatibility.

Cross-browser and cross-device testing using BrowserStack or Sauce Labs

Run tests on BrowserStack. Use when user mentions "browserstack", "cross-browser", "cloud testing", "browser matrix", "test on safari"…

This skill should be used when the user asks to "debug this", "fix this error", "investigate this bug", "troubleshoot this issue", "find…

Use when the user has a bug report, error, or customer complaint to investigate — especially when the report already names a cause or a…

Parse cyber threat intelligence reports (Mandiant, CrowdStrike, Talos, Microsoft) with stix2, mitreattack-python, and spaCy to extract…

Design identity governance and lifecycle (IGA) programs on platforms like SailPoint, Saviynt, or Entra ID Governance, covering…

Build an automated IOC enrichment pipeline on OpenCTI (STIX 2.1 native

Establish a repeatable operational process for triaging, testing, and

Builds a structured SOC incident response playbook for ransomware attacks

Deploy MISP via Docker and configure feeds from sources like abuse.ch, AlienVault OTX, and CIRCL to aggregate, correlate, and distribute…

Build a systematic threat-hunt workflow that turns threat intelligence and ATT&CK gap analysis into testable hypotheses, then executes and…

Implement a vulnerability aging dashboard and SLA tracking system that measures time-to-remediation against severity-based deadlines (e.g…

Deploy DefectDojo as a centralized vulnerability management dashboard that ingests findings from 200+ security scanners, deduplicates…

Build a vulnerability exception and risk acceptance tracking system covering approval workflows, compensating controls documentation, and…

Builds a structured vulnerability scanning workflow using tools like

Agent skill for byzantine-coordinator - invoke with $agent-byzantine-coordinator

Test C# MCP servers at multiple levels: unit tests for individual tools and integration tests using the MCP client SDK.

Turn a code change into a prioritized browser-QA plan with Canary — read the git diff, infer which user-facing workflows it touches…

Find the most appropriate CAPEC attack pattern(s) using the Varsel MCP's local CAPEC catalog, then propose them onto the case.