Security & Testing Agent Skills for Windsurf (legacy)

Concrete, per-area proof that a change actually works before reporting it fixed, done, or "should work now" — which dev server, test…

Use when about to run tests/builds for ctsnetwork-event, after editing any file in event/backend or event/frontend, or before reporting…

Use when applying web best practices — security headers, modern APIs, error handling.

Use when stakes are high — adversarial fresh-context review of every non-trivial decision.

Use when handling user input, auth, secrets, or external integrations — prevent OWASP Top 10, enforce auth patterns, secrets management…

Use when auditing web quality — orchestrate performance, a11y, SEO, best-practices across Lighthouse categories.

Audit rapidly generated or AI-produced code for structural flaws, fragility, and production risks.

Independently evaluate supplied technical and perceptual evidence for an immutable identified render.

4-phase root cause investigation methodology for bugs and unexpected behavior.

Structure descriptive evidence about already identified media assets or immutable renders.

Pixel-perfect visual testing with auto-fix loop.

Use after frontend, UI, UX, visual polish, responsive layout, design-to-code, dashboard, website, app-screen, or TUI changes when the…

MUST USE after building/changing any UI or when asked whether a page, component, or TUI looks right.

AI-powered visual regression testing skill for e-commerce websites.

Take screenshots and check if the UI looks right.

Vitest configuration, mocking, coverage, snapshot testing, and performance.

Vitest

Parallels macOS VM lab: GUI automation, Peekaboo, TCC, Ghostty.

Diagnosis loop for hard bugs and performance regressions.

Orchestrates systematic security audits by identifying, evaluating, and reporting vulnerabilities across networks and applications.

Validate security findings from commit-security-scan by assessing exploitability, filtering false positives, and generating…