Security & Testing Agent Skills for HTTP / API

Write effective tests across the stack—unit, integration, E2E, and visual regression.

Design a layered, risk-based test strategy and verify behavior before declaring software complete.

Best practices for writing R package tests using testthat version 3+.

Use when creating or editing skills, before deployment, to verify they work under pressure and resist rationalization - applies…

Use when asked to validate, test, smoke-test, or run the course's notebook and code samples against a live Microsoft Foundry / Azure…

Write, run and debug Jest tests for the Relay JavaScript runtime in this repo — above all `RelayModernStore`, garbage collection and…

Test web applications for security vulnerabilities including SQLi, XSS, command injection, JWT attacks, SSRF, file uploads, XXE, and API…

Sync tests with TestRail. Use when user mentions "testrail", "test management", "test cases", "test run", "sync test cases", "push results…

Use when writing or reviewing tests, or when asked how to write a good single test.

Spring Security best practices for authn/authz, validation, CSRF, secrets, headers, rate limiting, and dependency security in Java Spring…

Use when implementing any feature or bugfix, before writing implementation code

Triage ASM/recon output for ownership before testing — separate the target's real assets from namespace-collision noise.

The TDD discipline: seams, the red → green loop, and the anti-patterns to delete.

Audits repository security — hardcoded secrets, dependency vulnerabilities, environment variable management, and authentication patterns.

Comprehensive security and correctness audit of a branch's changes.

Parses and processes SARIF files from static analysis tools like CodeQL, Semgrep, or other scanners.

Run Semgrep static analysis scan on a codebase using parallel subagents.

Use when hunting for threats in an environment, analyzing IOCs, or detecting behavioral anomalies in telemetry.

Use when a repository, system, or major change needs a structured STRIDE-A threat model — map architecture, data flows, trust boundaries…

Generate a STRIDE-based security threat model for a repository.

Repository-grounded threat modeling. Enumerates trust boundaries, assets, attacker capabilities, and abuse paths tied to actual code. Not…