Security & Testing Agent Skills for Cursor

Review Playwright tests for quality. Use when user says "review tests", "check test quality", "audit tests", "improve tests", "test code…

Expert integration with Slither static analyzer for smart contract vulnerability detection, code quality analysis, and security reporting.

Install or restore a verifiable Slopo ratchet in a Git repository: pinned profiles and toolchain, a local index, iterative manual cluster…

Generate test report. Use when user says "test report", "results summary", "test status", "show results", "test dashboard", or "how did…

Intelligent test execution based on context with automatic failure analysis and fixes

Test-Driven Repair — given a failing test, spawn a bounded headless `claude -p` (Read/Edit/Bash only) that makes the test pass without…

Run 8 post-session-start health checks to verify the project is in a working state — git clean, no broken imports, tests pass, key files…

Conduct comprehensive security assessments of SMTP (Simple Mail Transfer Protocol) servers to identify vulnerabilities including open…

Create and validate component snapshots for UI regression testing.

Apply Snowflake security best practices: network policies, key rotation, MFA, encryption, and least-privilege access.

SOC 2 Type I and Type II compliance management against the Trust Services Criteria.

When to activate: SOC 2, SOC2, trust service criteria, security audit, Type I, Type II, evidence collection, audit preparation, controls…

Performs Socratic requirement reviews by asking probing QA-focused questions to uncover unstated PRD assumptions and edge cases.

Verify code changes with repository-native checks and evidence before declaring completion.

Apply explicitly requested engineering-quality guidance to implementation and maintenance work.

Master smart contract security best practices, vulnerability prevention, and secure Solidity development patterns.

Use when debugging any bug, failing test, flaky behavior, performance regression, unexpected runtime behavior, or reviewing an existing…

Detects and alerts on prompt injection backdoors in agent identity files (SOUL.md) — runs as a startup check or background watcher.

Assist in constructing type soundness proofs using progress and preservation theorems

Comprehensive C++ code review for memory safety, modern C++ idioms, concurrency, and security.

Enforce TDD workflow for C++. Write GoogleTest tests first, then implement. Verify coverage with gcov/lcov.