Security & Testing Agent Skills

Root cause investigation for a bug that survived a first fix.

Test driven development. Use when implementing a feature or bugfix. Write the failing test first, then the code that passes it.

Diagnose software failures through reproduction, boundary localization, competing hypotheses, and discriminating experiments.

Use when errors occur deep in execution and you need to trace back to find the original trigger - systematically traces bugs backward…

Hunting skill for business logic vulnerabilities.

Expert at writing reliable, comprehensive RSpec tests for Rails models, services, and controllers.

When to activate: Rails security, strong parameters, CSRF protect_from_forgery, SQL injection ActiveRecord, XSS raw html_safe, Rails…

When to activate: RSpec, describe context it, let and let!, FactoryBot, factories vs fixtures, request specs, shared examples, verified…

Pentest a web app, API, codebase, repository, URL, domain, or IP with Strix — autonomous AI penetration testing that exploits and proves…

End-to-end Coval adversarial / red-team testing workflow.

Generate comprehensive unit tests for Next.js 16 applications covering App Router, Server Components, Client Components, API routes, and…

End-to-end Coval audio-quality testing workflow.

Run local Appium test scripts against Kobiton devices.

Runs the project's own checks — tests, lint, type check, static analysis, any predicate command — locally and records each failure as an…

Start, inspect, and drive the PostHog dev stack.

Run the Omnigent load test and produce a results file explaining the latencies.

This skill enables Claude to run and manage integration test suites.

This skill enables Claude to validate test suite quality by performing mutation testing.

This skill runs smoke tests to verify critical application functionality.

Runs real-user QA, manual test plans, UX bug hunts, build sign-off, bug filing, and bug triage for web or iOS/iPadOS apps.

When to activate: Rust security, unsafe code, input validation, secret handling, cryptography, supply chain, audit, injection prevention