Security & Testing Agent Skills for Zed

Detect Broken Authentication abuse (API2:2023) against an API from auth-endpoint telemetry and token-validation events — invalid-signature…

Detect Broken Object Level Authorization (BOLA / API1:2023) abuse against a REST or GraphQL API from access logs, gateway telemetry, and…

Harden sensitive business flows against Unrestricted Access (API6:2023) and detect automated abuse.

Detect excessive data exposure (API3:2023) in an API from response telemetry and schema-diff analysis — endpoints returning sensitive…

Detect Broken Function Level Authorization abuse (BFLA / API5:2023) against an API from access logs and role/route telemetry…

API key generation, rotation, and management system

Find and prove mass assignment / Broken Object Property Level Authorization (API3:2023) in an API during an authorized test — setting…

Implement secure API design patterns including authentication, authorization, input validation, rate limiting, and protection against…

Harden a REST or GraphQL API against Security Misconfiguration (API8:2023).

Threat-model, design, implement, and review secure APIs and API-facing workflows.

Harden a REST or GraphQL API against Server-Side Request Forgery (SSRF / API7:2023) and detect exploitation attempts.

Build API test suites — endpoint testing, contract testing, load testing for REST/GraphQL/gRPC APIs.

Harden an application against Unsafe Consumption of APIs (API10:2023).

Secure Apify API tokens, configure proxy access, and protect Actor data.

Enterprise role-based access control for Apollo.io.

Secure AppFolio API credentials and tenant data.

Hardens application code, configurations, and delivery pipelines against common vulnerabilities and security risks.

[COMMUNITY] Generate a Notifiable Data Breach (NDB) scheme response playbook under Privacy Act 1988 Part IIIC — eligible-data-breach test…

[COMMUNITY] Generate an ASD operational technology cyber security assessment for Australian Government and critical-infrastructure…

[COMMUNITY] Generate a Privacy Impact Assessment (PIA) for Australian Government entities under Privacy Act 1988 s33D, assessing…

[COMMUNITY] Generate a Protective Security Policy Framework (PSPF) compliance assessment for Australian Government entities and…