Security & Testing Agent Skills for Zed

Perform Pass-the-Ticket (PtT) lateral movement by extracting Kerberos TGT/TGS tickets from LSASS memory on a compromised host and…

Use this skill when an agent needs a local, reviewable connector artifact before handing work to a maintainer, PR reviewer, or connector…

Analyze cryptographic code to detect operations that leak secret data through execution timing variations.

When to activate: container security, Docker hardening, image scanning, Trivy, Grype, Falco, runtime security, seccomp, non-root container

Content moderation API integration using OpenAI Moderation, Perspective API, and others

Wire Promptfoo and DeepTeam into CI/CD for automated regression red-teaming of LLM apps against OWASP LLM Top 10 and OWASP Agentic…

Generate contract tests for API migrations with consumer-driven contracts and provider verification

Write focused controller tests using HTTP assertions; keep heavy logic in Actions/Services and unit test them

Interface with Coq proof assistant for formal verification

Correlates security events in IBM QRadar SIEM using AQL (Ariel Query

Implement CEGAR for synthesis and verification workflows

Analyze test coverage gaps. Use when user says "test coverage", "what's not tested", "coverage gaps", "missing tests", "coverage report"…

Scaffold and implement authentication in TypeScript/JavaScript apps using Better Auth.

Use when asked to create or update integration tests for any Flet control in sdk/python/packages/flet/integration_tests, including visual…

Cross-chain bridge and multi-chain development expertise.

Execute comprehensive client-side injection vulnerability assessments on web applications to identify XSS and HTML injection flaws…

Cryptographic implementation analysis and validation for encryption algorithms, key sizes, and certificate management

/cs:gdpr-audit-prep <scope> — GDPR audit 6-question Article-cited forcing interrogation.

/cs:iso13485-audit-prep <scope> — ISO 13485 QMS audit 6-question forcing interrogation.

/cs:soc2-audit-prep <scope> — SOC 2 Type II readiness 6-question forcing interrogation.

Apply Customer.io security best practices.