Security & Testing Agent Skills for Windsurf (legacy)

Unit testing, integration testing, and test-driven development principles.

Automatically generates comprehensive test suites (unit, integration, E2E) based on code and past testing patterns.

Testing code that calls an APIMatic-generated .NET SDK in C# — which seam to fake, covering error and edge paths, asserting real behaviour…

How to write integration tests for error processors in packages/core/src/processors/.

Manually identifies flaws in application business logic - price manipulation,

Tests web application email functionality (contact forms, password reset,

Tests JWT implementations for algorithm confusion, "none" algorithm bypass,

Identifies and exploits open redirect vulnerabilities by analyzing URL

Identifying sensitive data exposure vulnerabilities including API key

Tests web applications for reflected, stored, and DOM-based Cross-Site

Identifying and validating cross-site scripting vulnerabilities using

Discovering and exploiting XML External Entity injection vulnerabilities

How to write tests, when to use each type of test, and how to run them.

Assessing JSON Web Token implementations for cryptographic weaknesses,

Testing mastracode TUI features interactively in Konsole.

Tests authentication and authorization mechanisms in mobile application

Tests OAuth 2.0 and OpenID Connect implementations for authorization code

Design a layered, risk-based test strategy and verify behavior before declaring software complete.

Best practices for writing R package tests using testthat version 3+.

Testing reconnaissance — inventory all tests, frameworks, coverage, CI integration, and assess testing maturity for project takeover.

Use when creating or editing skills, before deployment, to verify they work under pressure and resist rationalization - applies…