Security & Testing Agent Skills

Use to convene the adversarial-review panel before an expensive or irreversible commitment whose fate a reviewer can judge — correctness…

Checks the blast radius, impacted communities, and test gaps of changed files before a commit.

Review an authorized codebase for exploitable security defects by tracing untrusted input to sensitive operations and verifying reachable…

Post-implementation review orchestrator.

Reviews a Claude Skill or plugin before you trust it, whether it's a submission to an internal marketplace, a skill a colleague sent you…

The full review process for personhog coordination-protocol changes — leases, fencing, handoffs, supervisors, failure budgets, warming…

Use when judging whether this cut's code meets the PRD with evidence in the repo, issuing PASS or FAIL only, checking for work outside the…

Produce the structured risk picture that the spec must address — covering regression, code quality, performance and (when multi-repo is…

Bug-prevention audit for one feature/bugfix slice, run as two modes around TDD.

Find bugs, security vulnerabilities, and code quality issues in local branch changes.

Systematic debugging. Use when something is broken, a test fails, or behavior is unexpected. Find the cause before changing code. Do not…

Root cause investigation for a bug that survived a first fix.

Test driven development. Use when implementing a feature or bugfix. Write the failing test first, then the code that passes it.

Diagnose software failures through reproduction, boundary localization, competing hypotheses, and discriminating experiments.

Hunting skill for business logic vulnerabilities.

Skill for the Routes area of Securacy. 12 symbols across 4 files.

Expert at writing reliable, comprehensive RSpec tests for Rails models, services, and controllers.

When to activate: Rails security, strong parameters, CSRF protect_from_forgery, SQL injection ActiveRecord, XSS raw html_safe, Rails…

When to activate: RSpec, describe context it, let and let!, FactoryBot, factories vs fixtures, request specs, shared examples, verified…

End-to-end Coval accent testing workflow.

End-to-end Coval adversarial / red-team testing workflow.