Security & Testing Agent Skills for Cursor

ALWAYS USE when asked to fix, rewrite, update, improve, modernize, show corrected code for, or explain existing MSTest tests or…

Apply STRIDE methodology to systematically identify threats.

Map identified threats to appropriate security controls and mitigations.

Conduct WCAG 2.2 accessibility audits with automated testing, manual verification, and remediation guidance.

Test smart contracts comprehensively using Hardhat and Foundry with unit tests, integration tests, and mainnet forking.

You are a frontend security specialist focusing on Cross-Site Scripting (XSS) vulnerability detection and prevention.

Migrate .NET test projects from xUnit.net (v2 or v3) to MSTest v4.

Test-driven development with red-green-refactor loop.

(ywc) Use when implementation is complete and before creating a PR, to validate code against the spec or run a comprehensive quality review.

This skill should be used when the user asks to "use Metasploit for penetration testing", "exploit vulnerabilities with msfconsole"…

This skill should be used when the user asks to "test for SQL injection vulnerabilities", "perform SQLi attacks", "bypass authentication…

This skill should be used when the user asks to "analyze network traffic with Wireshark", "capture packets for troubleshooting", "filter…

Debug production and development failures with a hypothesis loop instead of shotgun edits.

Security leadership for growth-stage companies.

Security audit, hardening, threat modeling (STRIDE/PASTA), Red/Blue Team, OWASP checks, code review, incident response, and infrastructure…

Ensure to Regularly Patch Systems

Accessibility audit skill for scanning, fixing, and verifying WCAG 2.2 Level A and AA compliance across React, Next.js, Vue, Angular…

Evaluation harness for testing agent and skill quality through structured benchmarks, regression tests, and quality scoring.

OAuth 2.0/OIDC flows, provider integration, and token handling.

Playwright E2E testing, page objects, fixtures, visual regression, accessibility testing, and CI integration patterns.

Enterprise secrets management across platforms.