Security & Testing Agent Skills for HTTP / API

Root cause investigation for a bug that survived a first fix.

Test driven development. Use when implementing a feature or bugfix. Write the failing test first, then the code that passes it.

Diagnose software failures through reproduction, boundary localization, competing hypotheses, and discriminating experiments.

Hunting skill for business logic vulnerabilities.

Skill for the Routes area of Securacy. 12 symbols across 4 files.

Expert at writing reliable, comprehensive RSpec tests for Rails models, services, and controllers.

When to activate: Rails security, strong parameters, CSRF protect_from_forgery, SQL injection ActiveRecord, XSS raw html_safe, Rails…

When to activate: RSpec, describe context it, let and let!, FactoryBot, factories vs fixtures, request specs, shared examples, verified…

End-to-end Coval accent testing workflow.

End-to-end Coval adversarial / red-team testing workflow.

Generate comprehensive unit tests for Next.js 16 applications covering App Router, Server Components, Client Components, API routes, and…

End-to-end Coval audio-quality testing workflow.

Runs the project's own checks — tests, lint, type check, static analysis, any predicate command — locally and records each failure as an…

Run Playwright smoke tests, debug failures, and verify fixes

Run the Omnigent load test and produce a results file explaining the latencies.

Runs real-user QA, manual test plans, UX bug hunts, build sign-off, bug filing, and bug triage for web or iOS/iPadOS apps.

Structured debugging session — reproduce, isolate, diagnose, fix — driven by delegation.

When to activate: Rust security, unsafe code, input validation, secret handling, cryptography, supply chain, audit, injection prevention

Guides the creation of robust, refactor-resistant automated tests using seam boundaries, descriptive naming, and DAMP principles.

Audit and safely harden authorized SaaS web applications across frameworks and hosting providers.

Change or refactor shared, high-impact, or branch-sensitive code while preserving established behavior.