Security & Testing Agent Skills for Zed

Configures Zero Trust Network Access using Zscaler Private Access (ZPA) to broker identity-based, context-aware connections between…

Configures Google BeyondCorp Enterprise Identity-Aware Proxy (IAP) as the access enforcement point for web applications, defining Access…

Installs and configures HashiCorp Boundary as a default-deny, identity-aware proxy for infrastructure access, including controller/worker…

Improve test setup, instrumentation, calibration, sequencing, timing, multisite behavior, state restoration, or teardown without silently…

Create and maintain GitHub Agentic Workflows (gh-aw) for Prowler.

ISO 27001 ISMS implementation and cybersecurity governance for HealthTech and MedTech companies.

Drafts a board-approvable Information Security Policy covering data classification, access controls, encryption, incident response, breach…

Use when writing a constructor or initialiser, when a type needs a collaborator to do its work, or when adding a parameter so something…

Hunt ASP.NET-specific surface — ViewState deserialization (signed-only vs encrypted), machineKey recovery, dual-parser MAC-bypass…

Hardware-free testing of instrument-control code — mock architecture (ordered call_log, scripted responses, state simulation, failure…

Integrates CodeQL and Semgrep SAST scanning into GitHub Actions, covering scans on pull requests/pushes, rule tuning to cut false…

This skill enables Claude to seamlessly integrate with various secrets managers like HashiCorp Vault and AWS Secrets Manager.

Investigates insider threat indicators including data exfiltration attempts,

Forensically preserve memory and disk, collect ransom notes and encrypted file samples, and identify the ransomware variant using tools…

Evaluates IP addresses and proxy nodes across registries, geolocation consensus, fraud scores, and AI service accessibility.

Automate Ip2proxy tasks via Rube MCP (Composio).

Automate Ip2whois tasks via Rube MCP (Composio).

Functional safety process and analysis support per ISO 26262

When to activate: ISO 27001, ISMS, information security management, Annex A controls, risk assessment, certification, surveillance audit…