Security & Testing Agent Skills for Windsurf (legacy)

Identify and avoid the top Clay anti-patterns, gotchas, and integration

Apply Clay security best practices for API keys, webhook secrets, and

Configure enterprise SSO, role-based access control, and organization

Create your first authenticated request with Clerk.

Manage incident response for Clerk authentication issues.

Install and configure Clerk SDK/CLI authentication.

Implement security best practices with Clerk authentication.

Create, list, rotate, and revoke OmniRoute API keys from the CLI.

Handle ClickUp data exports, PII redaction, GDPR compliance, and

Secure ClickUp API tokens, implement least-privilege access, and audit

Make the cloud audit trail tamper-resistant and detect attempts to blind it.

Proactively hunt for and detect attacker persistence in cloud IAM.

Conduct comprehensive security assessments of cloud infrastructure across Microsoft Azure, Amazon Web Services (AWS), and Google Cloud…

Enforces a strict Red-Green-Refactor cycle to ensure reliable software behavior and high test coverage before writing production code.

Use this skill when the user wants a review or security audit of code or documentation.

Review Xtensa assembly code for ESP32 platforms.

Test authoring guidance

Provides adversarial code comprehension for security research, mapping architecture, tracing data flows, and hunting vulnerability…

Use PROACTIVELY when auditing code quality, running security scans, assessing technical debt, reviewing code for production readiness…

Comprehensive codebase cleanup across 11 quality dimensions: dead code,

Instructs AI coding agents to invoke CodeGuard MCP Server security rules before writing or reviewing code.