Security & Testing Agent Skills for Microsoft Copilot

Verify supply chain integrity for AI agent plugins, tools, and dependencies.

Test AI agent systems including tool use, multi-turn conversations, error recovery, and non-deterministic outputs.

Use the standard go test with table-driven tests as the primary pattern. Use t.Helper() to mark helper functions: Always run tests with…

Protocol-based dependency injection for testable Swift code — mock file system, network, and external APIs using focused protocols and…

Verify an AI SDLC change with either an implementation feedback loop or a read-only independent check and write verification evidence.

Enforces deterministic architectural health gates, baseline ratchets, and verified evidence across software repositories.

Use before releasing a product, feature, release candidate, or handoff when an AI agent must separate facts from assumptions, check…

Accessibility audit skill for scanning, fixing, and verifying WCAG 2.2 Level A and AA compliance across React, Next.js, Vue, Angular…

Run tests on BrowserStack. Use when user mentions "browserstack", "cross-browser", "cloud testing", "browser matrix", "test on safari"…

Generate Playwright tests. Use when user says "write tests", "generate tests", "add tests for", "test this component", "e2e test", "create…

Use when a security incident has been detected or declared and needs classification, triage, escalation path determination, and forensic…

Set up Playwright in a project. Use when user says "set up playwright", "add e2e tests", "configure playwright", "testing setup", "init…

Migrate from Cypress or Selenium to Playwright.

Use for Alpine.js security work. Covers the two injection seams — the VALUE a directive assigns, and the ATTRIBUTE EXPRESSION itself…

Reviews Altium Designer schematics to detect unconnected pins, missing footprints, and net errors with datasheet-backed defect validation.

Analyze a Coval adversarial / red-team testing report and turn it into an agent-hardening plan.

Correlate test-program source with CSV, STDF-derived data, datalogs, runtime logs, diffs, or screenshots to explain behavior and failures.

Parse and analyze email headers (Received chain, Return-Path, Message-ID)

Analyzes RAM memory dumps from compromised systems using the Volatility framework to identify malicious processes,

Use to audit test quality with SRE scrutiny - identifies weak tests, missing cases, and creates task docs for improvements

Vitest fast unit testing framework powered by Vite with Jest-compatible API.