claude

pre-ship-security-red-team

Authorized, evidence-driven red-team pass over a web app you own, before launch. Three read-only subagents run 14 authorization and abuse checks against isolated synthetic accounts, the chair fixes each failure, adds regression tests, and reruns with a negative control. Isolated local environments only; secrets masked in every artifact; anything unrun is reported not-proven, never passed.

0 on GitHubby Abdul Rahman P Zv0.1.0MITupdated 2 days ago
/

Plugin pre-ship-security-red-team from marketplace caffeinity-skills in arm-pz/caffeinity-skills. Commands read from the repo's manifest — yesterday.

What it installs

Skills (1)

  • pre-ship-security-red-team

    Authorized, evidence-driven security red-team pass over a web app you own before launch, run by three parallel read-only subagents with synthetic test accounts. Covers anonymous data access, IDOR cross-user object access, self-service role escalation, password-reset token reuse, UI-disabled request

View source on GitHub skills.caffeinity.com

More from arm-pz/caffeinity-skills

All 37 plugins →

caffeinity

claudecodex

Everything in one install: every caffeinity skill plus twelve workflow agents (skill-builder, discovery-lead, release-gatekeeper, seo-lead, job-search-coach, decision-analyst, learning-coach, outbound-lead, solo-launcher, skill-maintainer, estate-lead, harness-lead).

60 skills · 12 agents

0

Audits AI agents and Claude Code subagents against the seven layers a production agent needs: model, instructions, tools, memory, loop, guardrails and human approval, with a linter and delegation tests.

1 skill

0

Produces tailored job-application material: decoded JD table, action-task-result-impact bullet rewrites, honest keyword placement map, five role-specific summaries, full LinkedIn rewrite, and a 20-question interview answer pack. Sibling of recruiter-lens: it produces while recruiter-lens judges. Never invents experience or numbers.

1 skill

0

Runs the job search around the applications: search brief, role discovery with honest posting dates, rubric-based fit scoring, a reviewable CSV or Markdown tracker, follow-up drafts, interview briefings and a funnel review. Never submits, invents nothing, and has no CLI, telemetry, or browser automation. Coordinates with applicant-kit and recruiter-lens.

1 skill

0

Start here: picks which caffeinity skills to run, in what order, for a goal that spans several of them, and names the ones you have not installed.

1 skill

0

Gates a cold-email lead list before it loads: samples ten rows against the ICP, returns GO or HOLD with the fail pattern and the re-run condition, and compares data providers on the same criteria. Not for lists that already sent; that diagnosis is cold-email-ops.

1 skill

0

Maintain pre-ship-security-red-team?

This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.

claude & codex plugins37 plugins