Security & Testing Agent Skills for Windsurf (legacy)

Analyze PR diffs and generate review comments from code quality, security, and performance perspectives.

Test quality review drawing on twelve classic engineering books — with primary focus on xUnit Test Patterns, The Art of Unit Testing, How…

Audit an external AI/API provider and its integration into a BT6 repository for service reality, independent verification, trust…

Detects bugs, logic errors, and edge case handling issues in code.

Diagnose and fix an open bug tracked under bugs/ in the current repo, the test-driven way, then close it.

Systematically finds and fixes bugs using proven debugging techniques.

Find correctness bugs in source code through depth-first exploration.

Find correctness bugs in source code through five focused analysis passes.

Diagnose and fix software bugs through evidence-based investigation.

Diagnoses software bugs and performance regressions through disciplined, reproducible red-to-green feedback loops.

Turn a vague, intermittent, or environment-specific bug report into a minimal evidence-backed reproduction before proposing a fix.

Discovers BugBug project, repository, and tested-application context.

Demonstrate build-artifact tampering and lack of provenance (CICD-SEC-4/CICD-SEC-9 artifact integrity) during an authorized assessment…

VMware vSphere / vCenter Server external attack matrix — version fingerprinting, the high-impact CVE chain (CVE-2021-21972 vRealize unauth…

Build discipline for agent sessions that WRITE code — the failure modes no review-shaped skill catches, because nothing is being reviewed.

Smoke test the Agent Builder feature branch end-to-end against a hermetic project scaffolded by the skill (linked to the current worktree).

Use this skill when handling user input, working with memory, file I/O, network operations, or implementing security-sensitive features.

BiSheng C translation from C. When you need to translate/convert/port C code (.c/.h) to BiSheng C (.cbs/.hbs), add ownership annotations…

BiSheng C translation from C. When you translate C code to BSC, add ownership annotations, or migrate a C project to BSC, you MUST use…

Implement Canva Connect API load testing, auto-scaling, and capacity

Implement Canva Connect API lint rules, policy enforcement, and automated