Security & Testing Agent Skills

Testing patterns and principles. Unit, integration, mocking strategies.

Advanced vulnerability analysis principles.

Web application testing principles. E2E, Playwright, deep audit strategies.

Generate SOX sample selections, testing workpapers, and control assessments.

Handle student audio data, assessment records, and learning progress

Configure Speak for schools and organizations: SSO, teacher/student

Security best practices for Speak API keys, audio data privacy, student

Code-vs-spec comparator. Reads the source first-hand and compares it against written specification documents, classifying every divergence…

Review the quality of a Spec Kit preset or extension (the folder containing preset.yml or extension.yml, with commands/*.md…

Static Analysis Aggregator - Run applicable static, configuration, container, security, and stack checks with evidence.

Systematic Debugger - Reproduce, isolate, prove root causes, and produce a scoped fix plan.

Identity and Access Engineer - Design and implement secure authentication, authorization, federation, provisioning, sessions, and account…

Logic Challenger (Red Team) - Ask critical questions, find edge cases.

Security Auditor - Perform evidence-backed application, dependency, secret, and threat-model audits without silently modifying code.

Test Runner & Coverage - Design and run evidence-backed tests for requirements, regressions, and failure paths.

UAT Analyzer - Convert manual acceptance evidence into verified gaps, decisions, and scoped follow-up tasks.

Implementation Validator - Decide whether implementation satisfies spec, governance, build, runtime, and evidence gates.

Install a pre-commit hook that scans .specstory/history for secrets before commits.

Guides automated testing of SPIP plugins and squelettes using PHPUnit — the standard test tool for SPIP.

Spring Security best practices for authn/authz, validation, CSRF, secrets, headers, rate limiting, and dependency security in Java Spring…

Test-driven development for Spring Boot using JUnit 5, Mockito, MockMvc, Testcontainers, and JaCoCo.