Security & Testing Agent Skills for Devin Desktop

Use when errors occur deep in execution and you need to trace back to find the original trigger - systematically traces bugs backward…

Hunting skill for business logic vulnerabilities.

Expert at writing reliable, comprehensive RSpec tests for Rails models, services, and controllers.

When to activate: Rails security, strong parameters, CSRF protect_from_forgery, SQL injection ActiveRecord, XSS raw html_safe, Rails…

When to activate: RSpec, describe context it, let and let!, FactoryBot, factories vs fixtures, request specs, shared examples, verified…

Pentest a web app, API, codebase, repository, URL, domain, or IP with Strix — autonomous AI penetration testing that exploits and proves…

End-to-end Coval adversarial / red-team testing workflow.

Generate comprehensive unit tests for Next.js 16 applications covering App Router, Server Components, Client Components, API routes, and…

End-to-end Coval audio-quality testing workflow.

Run local Appium test scripts against Kobiton devices.

Runs the project's own checks — tests, lint, type check, static analysis, any predicate command — locally and records each failure as an…

Start, inspect, and drive the PostHog dev stack.

Run the Omnigent load test and produce a results file explaining the latencies.

This skill enables Claude to run and manage integration test suites.

This skill enables Claude to validate test suite quality by performing mutation testing.

This skill runs smoke tests to verify critical application functionality.

Runs real-user QA, manual test plans, UX bug hunts, build sign-off, bug filing, and bug triage for web or iOS/iPadOS apps.

When to activate: Rust security, unsafe code, input validation, secret handling, cryptography, supply chain, audit, injection prevention

Rust testing patterns including unit tests, integration tests, async testing, property-based testing, mocking, and coverage.

Scan project dependencies for known vulnerabilities and CVEs.

Guides the creation of robust, refactor-resistant automated tests using seam boundaries, descriptive naming, and DAMP principles.