Security & Testing Agent Skills for Cursor

Sets up eval-driven development (EDD) for an agent-assisted feature — define capability and regression evals before coding, grade them…

Runs a two-pass vulnerability scan on a snippet, file, or diff — a static pattern pass across fixed categories (injection, secrets, auth…

Hardens a feature against attack before or while it's built — threat-model trust boundaries with STRIDE, apply the Always/Ask-First/Never…

Reviews code for security vulnerabilities across Go, TypeScript, PHP, and infrastructure config.

Audits an agent harness's own configuration — CLAUDE.md, .claude/settings.json, MCP server configs, hooks, and agent definitions — for…

Drives development with tests written before implementation code, in Go, TypeScript, PHP, or any language.

Generates comprehensive unit, table-driven, and concurrency tests for a given function or module — happy paths, error paths, boundary…

Comprehensive web quality audit covering performance, accessibility, SEO, and best practices.

Disciplined diagnosis loop for hard bugs and performance regressions — builds a tight, red-capable feedback loop at the level the bug was…

It fixes the current repository until it's green. It detects the stack, runs tests, type checks, lint, and builds, fixes loop errors, and…

The durable documentation set that makes an AI-built (vibe-coded) app reviewable before shipping.

Provide systematic methodologies for leveraging Shodan as a reconnaissance tool during penetration testing engagements.

Manipulate numerical data, contingency tables, and statistical findings so that no individual or organization is identifiable in the…

Implement or review authentication and authorization with explicit token, session and resource-access boundaries.

Master Bash Automated Testing System (Bats) for comprehensive shell script testing.

Expert AI auditor for FDA Food Safety (FSMA), HACCP, and PCQI compliance.

Configure and test common network services (HTTP, HTTPS, SNMP, SMB) for penetration testing lab environments.

Master essential security scanning tools for network discovery, vulnerability assessment, web application testing, wireless security, and…

Creates language variants of existing Semgrep rules.

Signals scout for Content Security Policy violations.

Generate comprehensive, meaningful tests for a given piece of code