Security & Testing Agent Skills

Guides the agent on how to run clean python styling, Black/Ruff compliance checks, and pytest execution on changed python scripts.

Standardizes pytest workflows by prioritizing behavior-driven testing and robust isolation patterns to ensure resilient test suites.

Enforces strict Python code quality standards using pytest, mypy, ruff, black, and isort.

Audits Python libraries for security vulnerabilities using Bandit, pip-audit, Semgrep, and detect-secrets.

When to activate: Python security review, OWASP, SQL injection, secrets management, authentication, cryptography

Use this when authoring integration tests against a real backend (PostgreSQL, Redis, Kafka, MinIO, NATS, MongoDB), debugging slow or flaky…

Verify claims in a session/PR/transcript against on-disk reality.

Senior QA/QC engineer that evaluates existing codebases for test quality.

Implement the "handoff context" produced by qa-discovery in concrete test code. Use it ONLY when a developer has already…

Use when reviewing or planning QA strategy for a feature, PR, or release so test coverage, test quality, reliability, and defect reporting…

Multi-agent QA review team for code changes.

Generate QA test cases from branch diff and PR body for manual testing handoff.

Design focused QA cases and investigate suspected product defects with Opsphere evidence.

This skill should be used when the user asks to "design a test strategy", "figure out our testing approach for this feature", "how much…

Builds and strengthens TypeScript unit tests with example-based tests, fast-check property testing, and Stryker mutation analysis.

Shared QA Wolf connection, safety, and tool guidance for running flows, investigating failures, managing environments and issues, and…

Add Google OAuth login to a Next.js app using NextAuth.js v4 + PrismaAdapter + JWT sessions.

Generate and validate qtip Subject Manifests for software projects.

Use when a user wants an AI assistant or coding agent to provide setup guidance, evaluation, review, improvement, recommendation…

Unified quality gates for Laravel projects; Pint, static analysis (PHPStan/Psalm), Insights (optional), and JS linters; Sail and non-Sail…

Quarkus Security best practices for authentication, authorization, JWT/OIDC, RBAC, input validation, CSRF, secrets management, and…