Security & Testing Agent Skills

This skill should be used when the user asks to "design a test strategy", "figure out our testing approach for this feature", "how much…

Generate and execute API and E2E tests with quality gate assessment.

Shared QA Wolf connection, safety, and tool guidance for running flows, investigating failures, managing environments and issues, and…

Quantum random number generation skill for cryptographic applications

Add Google OAuth login to a Next.js app using NextAuth.js v4 + PrismaAdapter + JWT sessions.

Generate and validate qtip Subject Manifests for software projects.

Use when a user wants an AI assistant or coding agent to provide setup guidance, evaluation, review, improvement, recommendation…

Unified quality gates for Laravel projects; Pint, static analysis (PHPStan/Psalm), Insights (optional), and JS linters; Sail and non-Sail…

Quarkus Security best practices for authentication, authorization, JWT/OIDC, RBAC, input validation, CSRF, secrets management, and…

Verification loop for Quarkus projects: build, static analysis, tests with coverage, security scans, native compilation, and diff review…

QuickNode security basics \u2014 blockchain RPC and Web3 infrastructure\

Implement secure API design patterns including authentication, authorization, input validation, rate limiting, and protection against…

Expert in secure backend coding practices specializing in input validation, authentication, and API security.

Build production-ready Web3 applications, smart contracts, and decentralized systems.

Discover a single-page-app's hidden backend API from its public JS bundle, then test that API for broken access control / missing…

Guidance for writing or reviewing React unit tests — test observable behavior via Testing Library queries (role/label/text over test-id)…

Run authorized, evidence-backed Recon Workbench (rwb) workflows (doctor/authorize/plan/run/summarize/manifest/validate/reconcile) and…

Executes structured ransomware incident recovery following NIST/CISA

Enforces a disciplined Red-Green-Refactor (TDD) workflow in TypeScript/Node.js.

Red team tactics principles based on MITRE ATT&CK.

This skill should be used when the user asks to "follow red team methodology", "perform bug bounty hunting", "automate reconnaissance"…