Security & Testing Agent Skills
Compare the best open-source agent skills for security & testing. Scanners, pentest helpers and test automation. Ranked by GitHub stars, with install commands, what each one can touch and scan reports where available.
Gravitas
Make Gemini code like Claude Models. Forces it to inspect files before editing, plan changes, test its work, and back up every “done” with actual evidence.
Offensive Claude
Offensive security toolkit for Claude Code covering red team, exploit dev, AD attacks, EDR bypass, mobile pentest
Agent Skills Guard
一款提供Agent Skills安全扫描和可视化管理的桌面应用 | A desktop application that provides security scanning and visual management for Agent Skills.
Finding Unknowns Skills
14 installable skills for Claude Code, OpenAI Codex, and Hermes: find unknowns, clarify requirements, manage context, test assumptions, and verify bug fixes with regression evidence.
TORCH
Karpathy LLM based claude harness for PenetrationTesting / Bugbounty using obsidian
Test Automation Skills Agents
A practical library of agents, instructions, and skills designed specifically for QA Automation Engineers, focusing on production-oriented solutions.
Robotics Skills Suite
76 audit-ready Claude skills automating the industrial robot, cobot, AMR, ROS2, V&V, AI/ML, and IEC 62443 lifecycle. 38 builder + reviewer pairs anchored to ISO 10218, 13849, 62061, 12100, 9283, 15066, 3691-4, and IEC 62443.
Claude Wordpress Skills
Professional WordPress engineering skills for Claude Code - performance optimization, security auditing, Gutenberg block development, and theme/plugin best practices.
Qa Skills
50 QA and test-automation skills for Claude Code, Codex, Cursor, and any Agent Skills Standard runtime.
Kotlin Kmp Claude Agent Skills
Public AI agent skills for Kotlin Multiplatform projects, grounded in official Android, Kotlin Multiplatform, Compose, navigation, testing, and modularization guidance.
Claude Skill Antivirus
Security scanner for Claude Code Skills — 9 engines detect malicious patterns, data exfiltration, dangerous ops across 71K+ skills
Testany Agent Skills
Open-source agent skills by Testany: engineering, prompts, content, testing, and SkillDock for visual Codex skill management.
Security Skills Claude Code
This repository is a curated collection of skills, plugins, and automation pipelines designed for Claude Code — Anthropic's CLI for AI-assisted software engineering. It was built by the engineering and security engineering teams at Phoenix Security and released as open source so that security professionals, DevSecOps engineers, AppSec teams
Open Science Skills
Agentic skills for Claude Code and Codex, built from published social-science methods sources. Covers experimental design, computational text analysis, manuscript QA, and transparent reporting.
Claude Code Power Platform Skills
Power Platform skills for Claude Code — plan, build, deploy, and test Power Apps, Dataverse, plugins, PCF controls, and more.
Claude Pentest Skills
AI-powered web application penetration testing skills with Claude Code
Claude Sdlc Skills
AI-native SDLC skills for Claude Code: requirement intake & audit, adversarial review gate, AI test orchestration, decision re-check, release config audit
Claude Skills
UX/UI evaluation, AI governance, and AI security skills for AI coding assistants. Audit interfaces with Nielsen heuristics, WCAG, Don Norman principles. Assess AI risk with NIST AI RMF, ISO 42001, OWASP LLM Top 10, and OWASP AI Testing Guide.
Redteam Skill
Redteam / Pentest Skill Pack — semi-automated workflow + on-demand module selection + real-world attack chains | Kali + Claude Code 红队/渗透/技能包 - 半自动工作流 + 按需点选模块 + 实战利用链 | 基于 Kali 与 Claude Code
Vetix
Vetix — Automated scanning, identification, and assessment of SKILL security risks, based on Golang.
R02 Alirezarezvani Claude Skills Security
🔒 Security & Compliance skill suite derived from alirezarezvani/claude-skills.
Claude AI Cyber Security Skills
30 Claude Code Skills + 60+ integrated tools for HackerOne/Bugcrowd bug bounty hunters
Contrarian
Devil's advocate for coding agents. Stress-tests plans, architecture and decisions with a steel-man, an assumption audit and a pre-mortem, then gives severity-rated findings and a verdict. Works in Claude Code, Codex, Cursor, Gemini CLI, Copilot and 12 more.
Agent Verifier
🔍 Agent Verifier is a coding agent skill that verifies code against organizational policies, code quality patterns, security requirements, and framework best practices — before code ships. Works with Claude Code, Cursor, Windsurf, and 30+ agents.
List refreshed November 15, 2026. Data comes from public GitHub repositories.