Security & Testing Agent Skills for Windsurf (legacy)

Ask Codex CLI (gpt-5.6-sol) to run local app verification that needs computer use, browser automation, simulators, screenshots, app…

QA the omo Codex Light edition (lazycodex / packages/omo-codex) itself, in strict isolation so ONLY our plugin is exercised, never the…

Implement data privacy for Cohere API calls with PII redaction and compliance.

Internal downstream skill for ctf-sandbox-orchestrator.

When to activate: compliance monitoring, continuous compliance, control monitoring, compliance dashboard, policy attestation, compliance…

Track compliance requirements and audit readiness.

Conduct a defensible cybersecurity risk assessment using the NIST SP 800-30 Rev 1 methodology: prepare scope and a risk model, identify…

This skill enables Claude to design and execute chaos engineering experiments to test system resilience.

This skill should be used when the user says "configure hooks", "set up quality gates", "add PostToolUse hook", "set up permission hooks"…

Build or adapt a local harness to drive, inspect, and profile an interactive CLI or TUI without external services.

Automate Control D tasks via Rube MCP (Composio).

Use when testing, fixing, or extending the OpenClaw Control UI GUI with Vitest + Playwright end-to-end checks, mocked Gateway WebSocket…

Implement secure authentication in Convex with user management and access control.

Use when working with performance testing review multi agent review

Spin up a live local Omnigent server and exercise the GitHub Copilot SDK harness end-to-end — build copilot agents, run real turns…

Secure CoreWeave deployments with RBAC, network policies, and secrets

Comprehensive security code review workflow for a target repository, producing a markdown report with findings and recommendations.

Plan for the continuance of [organization-defined] mission and business functions with minimal or no loss of operational continuity and…

Write idiomatic C++ code with modern features, RAII, smart pointers, and STL algorithms.

Generate a project-local verification skill that drives your app the way a user does — any language, framework, or platform.

Use this skill when users ask about benchmarking Clojure code, measuring performance, profiling execution time, or using the criterium…