Security & Testing Agent Skills for Gemini CLI

Identify and test open redirect vulnerabilities in web applications by

Test web applications for XML injection vulnerabilities including XXE,

Identifies dependencies at heightened risk of exploitation or takeover.

When to activate: supply chain security, SBOM, dependency pinning, Sigstore, Cosign, provenance attestation, SLSA framework, software bill…

Specialized skill for creating and debugging SystemVerilog assertions for FPGA verification

A read-only swarm for analysis — dispatch parallel sub-agents to INVESTIGATE different parts of the project (bugs, risks, smells, perf…

Massive multi-agent audit sweep — the generalized FAB-project pattern.

Use when Swift defines or changes XPC, socket, IPC, Codable, serialization, plugin, or other process/module boundaries.

Use when Swift touches POSIX, file descriptors, sockets, pointers, buffers, C ABI, mmap, unsafe code, or manual cleanup.

Switch to expert role for specialized analysis.

Expert at writing and debugging reliable, non-flaky Capybara/Selenium system tests for Rails applications with Hotwire.

You are an expert Rails system test developer.

Use when encountering any bug, test failure, or unexpected behavior, before proposing fixes

4-phase root cause debugging (DSH version): Loop closure followed by hypothesis testing + seam checks + parallel hypothesis verification…

Use when designing or auditing a TACAS (ETAPS) evaluation, covering shared verification benchmarks (SV-COMP-style task sets), fair…

Enforceable test-first execution loop for features and bug fixes — red, green, refactor, with completion evidence.

Master TDD orchestrator specializing in red-green-refactor discipline, multi-agent workflow coordination, and comprehensive test-driven…

Use when the user asks for TDD, red-green-refactor, tests-first implementation, or a bug fix/feature with tests first.

Use when approved work changes caller-visible or user-visible behavior, adds a new behavior path, or an understood bug needs a new durable…

Runs the full TDD workflow for a TypeScript/JavaScript feature — user journeys to test cases, unit tests (Jest/Vitest + Testing Library)…

Use when working with tdd workflows tdd cycle