Security & Testing Agent Skills for Windsurf (legacy)

Internal downstream skill for ctf-sandbox-orchestrator.

Use when the user wants to know what will break if they change something, or needs safety analysis before editing code.

This skill should be used when the user asks to "create a hookify rule", "write a hook rule", "configure hookify", "add a hookify rule"…

Performs comprehensive C/C++ security review for memory corruption, integer overflows, race conditions, and platform-specific…

Create and manage sandboxed WASM agents for isolated code execution

Parses API Gateway access logs (AWS API Gateway, Kong, Nginx) to detect

Systematically evaluate cyber-campaign evidence to attribute an operation to a threat actor, using the Diamond Model and Analysis of…

Cancel active UltraQA cycling workflow

Understand a codebase before looking for bugs in it - what each function assumes, what it guarantees, and what it depends on elsewhere.

Migrate authentication systems with credential migration, OAuth2/OIDC setup, and identity provider integration

Deploy Microsoft Sentinel as a cloud-native SIEM/SOAR by configuring multi-cloud data connectors (AWS, Azure, GCP), writing KQL detection…

Multi-language code coverage analysis, reporting, and quality gate enforcement

Internal downstream skill for ctf-sandbox-orchestrator.

Internal downstream skill for ctf-sandbox-orchestrator.

Runs a budget-aware agent-assisted engineering health audit for instruction/config drift, hooks/MCP, verifier surfaces, and AI…

Migrate an MSTest v3 test project to MSTest v4.

Strict RED-GREEN-REFACTOR cycle enforcement.

Automate Abuselpdb tasks via Rube MCP (Composio).

Generate comprehensive, maintainable unit tests across languages with strong coverage and edge case focus.

Lists available make commands for Streamlit development.

Review OneKey PRs and diffs for security, correctness, concurrency, React/RN pitfalls, and repository-specific regressions.