Security & Testing Agent Skills

Local development with Persona sandbox, ngrok for webhooks, mock verifications.

Use when configuring CodeIgniter 4-specific security mechanisms - CSRF protection mode (cookie vs session), output escaping with esc()…

When to activate: PHP security, SQL injection, PDO prepared statements, mass assignment, CSRF, Blade XSS, password_hash, session fixation…

When to activate: PHPUnit, Pest, PHP testing, data providers, mocking, test doubles, Laravel testing, RefreshDatabase, feature tests, HTTP…

Design comprehensive test cases using PICT (Pairwise Independent Combinatorial Testing) for any piece of requirements or code.

Use whenever a server error with a structured payload flows into a UI error handler.

Find the actual cause of an admitted failure instead of a plausible one using a systematic empirical method grounded in Agans and Zeller…

Write code that resists attack — parameterizing rather than escaping, encoding for the right output context, checking authorization per…

Refute your own work before delivering it.

Pre-publish safety audit for a professional's public GitHub presence.

Post-quantum cryptography evaluation skill for quantum-safe migration

Use when reviewing a pull request for security issues — automatically analyzes the diff for vulnerabilities, hardcoded secrets, injection…

Audits Product Requirement Documents across seven interaction dimensions to identify missing UI logic, edge cases, and specification gaps.

Pre-commit review: security scan, quality gates, auto-fix.

Review prediction-market, basket, oracle, and trading-agent workflows for compliance, safety, data-quality, privacy, and execution risk.

Client-facing red-team deliverable format — codifies the Subject / Observations / Description / Impact / Recommendation / PoC structure…

Authors ModSec rules, APF/CSF/iptables/nftables firewall blocks, and LMD/ClamAV signature submissions for confirmed attack patterns.

Polish a generated CLI to pass verification and become publish-ready.

Skill for the Privacy area of Securacy. 73 symbols across 9 files.

Use when building apps that collect user data.

Draft a detailed privacy policy covering data types, jurisdiction, GDPR and compliance considerations, and clauses needing legal review.