Security & Testing Agent Skills for Cursor

Generate QA test cases from branch diff and PR body for manual testing handoff.

Design focused QA cases and investigate suspected product defects with Opsphere evidence.

This skill should be used when the user asks to "design a test strategy", "figure out our testing approach for this feature", "how much…

Builds and strengthens TypeScript unit tests with example-based tests, fast-check property testing, and Stryker mutation analysis.

Shared QA Wolf connection, safety, and tool guidance for running flows, investigating failures, managing environments and issues, and…

Add Google OAuth login to a Next.js app using NextAuth.js v4 + PrismaAdapter + JWT sessions.

Generate and validate qtip Subject Manifests for software projects.

Use when a user wants an AI assistant or coding agent to provide setup guidance, evaluation, review, improvement, recommendation…

Unified quality gates for Laravel projects; Pint, static analysis (PHPStan/Psalm), Insights (optional), and JS linters; Sail and non-Sail…

Quarkus Security best practices for authentication, authorization, JWT/OIDC, RBAC, input validation, CSRF, secrets management, and…

Verification loop for Quarkus projects: build, static analysis, tests with coverage, security scans, native compilation, and diff review…

Run a sequential three-tier code review on a finished implementation branch — Haiku (surface) → Sonnet (logic) → Opus (deep).

Iterative root-cause + fix agent workflow that gathers evidence (code/logs/tests/web), verifies the primary ROOT_CAUSE claim with…

Discover a single-page-app's hidden backend API from its public JS bundle, then test that API for broken access control / missing…

Use when writing, reviewing, or refactoring React component tests with Testing Library.

Guidance for writing or reviewing React unit tests — test observable behavior via Testing Library queries (role/label/text over test-id)…

Run authorized, evidence-backed Recon Workbench (rwb) workflows (doctor/authorize/plan/run/summarize/manifest/validate/reconcile) and…

Recovers deleted files from disk images and storage media using PhotoRec's

Enforces a disciplined Red-Green-Refactor (TDD) workflow in TypeScript/Node.js.

Use when planning or executing authorized red team engagements, attack path analysis, or offensive security simulations.

Adversarial claim verification. Before accepting any "it works / it's done / it's fixed" claim, construct the concrete input that would…