Security & Testing Agent Skills for Devin Desktop

Debug issues methodically — use when stuck on errors, test failures, or unexpected behavior

Semgrep is a fast static analysis tool for finding bugs and enforcing code standards.

Drives development with tests. Use when implementing any logic, fixing any bug, or changing any behavior. Use when you need to prove that…

Reference-only filter syntax for VSTest and MTP with MSTest, NUnit, xUnit v3, and TUnit.

Set up, repair, or migrate to Cloudflare Turnstile bot verification in an existing frontend and backend, including server-side Siteverify.

This skill should be used when the user asks to "plan a penetration test", "create a security assessment checklist", "prepare for…

Cross-vendor adversarial code review of the current branch.

Parses Kubernetes API server audit logs (JSON lines) to detect exec-into-pod, secret access, RBAC modifications, privileged pod creation…

Find and prove excessive data exposure (part of API3:2023) in an API during an authorized test — endpoints that return more object…

Use when fixing dependency vulnerabilities, running pnpm audit, or when the audit-dependencies CI check fails

BDD requirements discovery methodology - Example Mapping, Three Amigos, conversational patterns, Given-When-Then translation, and…

Scans Cairo/StarkNet smart contracts for 6 critical vulnerabilities including felt252 arithmetic overflow, L1-L2 messaging issues, address…

Safety guardrails for destructive commands.

Read-only drift detector. Diffs SPEC.md against current code and reports violations grouped by severity. Writes nothing — suggests…

Bug diagnosis and fixing specialist - analyzes errors, identifies root causes, provides fixes, and writes regression tests.

Debug and analyze errors following best practices

Check every dependency in a package.json against live CVE databases and security advisories in real time — specifically targeting…

Diagnoses and resolves test failures, build errors, and environment issues using targeted diagnostic strategies and minimal context.

Annotates codebases with dimensional analysis comments documenting units, dimensions, and decimal scaling.

Subjects every non-trivial decision to a fresh-context adversarial review before it stands.

Enforce security policies and coding standards for Figma API integrations.