Security & Testing Agent Skills for Gemini CLI

Review the codebase for mission-critical files and propose cbc=mandatory .gitattributes tags for human ratification

Use to convene the adversarial-review panel before an expensive or irreversible commitment whose fate a reviewer can judge — correctness…

Addresses and fixes findings from a QA code review.

Review an authorized codebase for exploitable security defects by tracing untrusted input to sensitive operations and verifying reachable…

Post-implementation review orchestrator.

Reviews a Claude Skill or plugin before you trust it, whether it's a submission to an internal marketplace, a skill a colleague sent you…

Authorized RF/SDR security research: signal identification, replay-feasibility study in shielded labs, and wireless protocol analysis…

Produce the structured risk picture that the spec must address — covering regression, code quality, performance and (when multi-repo is…

Bug-prevention audit for one feature/bugfix slice, run as two modes around TDD.

Automate Rkvst tasks via Rube MCP (Composio).

Find bugs, security vulnerabilities, and code quality issues in local branch changes.

Root cause investigation for a bug that survived a first fix.

Test driven development. Use when implementing a feature or bugfix. Write the failing test first, then the code that passes it.

Diagnose software failures through reproduction, boundary localization, competing hypotheses, and discriminating experiments.

Use when errors occur deep in execution and you need to trace back to find the original trigger - systematically traces bugs backward…

Hunting skill for business logic vulnerabilities.

Expert at writing reliable, comprehensive RSpec tests for Rails models, services, and controllers.

When to activate: Rails security, strong parameters, CSRF protect_from_forgery, SQL injection ActiveRecord, XSS raw html_safe, Rails…

When to activate: RSpec, describe context it, let and let!, FactoryBot, factories vs fixtures, request specs, shared examples, verified…

Pentest a web app, API, codebase, repository, URL, domain, or IP with Strix — autonomous AI penetration testing that exploits and proves…