Security & Testing Agent Skills for Devin Desktop

Design test strategies and test plans. Trigger with "how should we test", "test strategy for", "write tests for", "test plan", "what tests…

Use when asked to validate, test, smoke-test, or run the course's notebook and code samples against a live Microsoft Foundry / Azure…

Write, run and debug Jest tests for the Relay JavaScript runtime in this repo — above all `RelayModernStore`, garbage collection and…

Sync tests with TestRail. Use when user mentions "testrail", "test management", "test cases", "test run", "sync test cases", "push results…

Skill for the Tests area of Securacy. 114 symbols across 19 files.

Spring Security best practices for authn/authz, validation, CSRF, secrets, headers, rate limiting, and dependency security in Java Spring…

Use when challenging ideas, plans, decisions, or proposals.

The TDD discipline: seams, the red → green loop, and the anti-patterns to delete.

Audits repository security — hardcoded secrets, dependency vulnerabilities, environment variable management, and authentication patterns.

Comprehensive security and correctness audit of a branch's changes.

Run Semgrep static analysis scan on a codebase using parallel subagents.

Map identified threats to appropriate security controls and mitigations.

Produce a threat model — assets, ranked threats, mitigations, accepted risks.

Use when a repository, system, or major change needs a structured STRIDE-A threat model — map architecture, data flows, trust boundaries…

Generate a STRIDE-based security threat model for a repository.

Repository-grounded threat modeling. Enumerates trust boundaries, assets, attacker capabilities, and abuse paths tied to actual code. Not…

Expert in threat modeling methodologies, security architecture review, and risk assessment.

Generate and analyze TLA+ specifications for distributed systems verification

Expert skill for TLS/SSL implementation and certificate management.

Together AI security basics for inference, fine-tuning, and model deployment.

Track new token launches across DEXes with risk analysis and contract