Security & Testing Agent Skills for Microsoft Copilot

Test web applications for XML injection vulnerabilities including XXE,

Identifies dependencies at heightened risk of exploitation or takeover.

When to activate: supply chain security, SBOM, dependency pinning, Sigstore, Cosign, provenance attestation, SLSA framework, software bill…

Specialized skill for creating and debugging SystemVerilog assertions for FPGA verification

A read-only swarm for analysis — dispatch parallel sub-agents to INVESTIGATE different parts of the project (bugs, risks, smells, perf…

Massive multi-agent audit sweep — the generalized FAB-project pattern.

Use when Swift defines or changes XPC, socket, IPC, Codable, serialization, plugin, or other process/module boundaries.

Use when Swift touches POSIX, file descriptors, sockets, pointers, buffers, C ABI, mmap, unsafe code, or manual cleanup.

Switch to expert role for specialized analysis.

Expert at writing and debugging reliable, non-flaky Capybara/Selenium system tests for Rails applications with Hotwire.

You are an expert Rails system test developer.

Use when encountering any bug, test failure, or unexpected behavior, before proposing fixes

4-phase root cause debugging (DSH version): Loop closure followed by hypothesis testing + seam checks + parallel hypothesis verification…

Use when designing or auditing a TACAS (ETAPS) evaluation, covering shared verification benchmarks (SV-COMP-style task sets), fair…

Enforceable test-first execution loop for features and bug fixes — red, green, refactor, with completion evidence.

Master TDD orchestrator specializing in red-green-refactor discipline, multi-agent workflow coordination, and comprehensive test-driven…

Use when the user asks for TDD, red-green-refactor, tests-first implementation, or a bug fix/feature with tests first.

Use when approved work changes caller-visible or user-visible behavior, adds a new behavior path, or an understood bug needs a new durable…

Runs the full TDD workflow for a TypeScript/JavaScript feature — user journeys to test cases, unit tests (Jest/Vitest + Testing Library)…

Use when working with tdd workflows tdd cycle

Thorough, file-cited technical debt audit across 9 dimensions using AST-grep (tree-sitter), grep, language-native tooling, and optionally…