Security & Testing Agent Skills for Windsurf (legacy)

Run a second-model quality gate on staged changes, a skill draft, or any generated output.

/cs:aims-audit <scope> — ISO/IEC 42001 AIMS internal-audit 6-question forcing interrogation.

/cs:compliance-readiness <program> — Multi-framework compliance officer 6-question forcing interrogation of any compliance program.

Cucumber/Gherkin BDD testing for behavior-driven development workflows

Compliance and security auditing for Cursor IDE usage: SOC 2, GDPR,

Configure Cursor privacy mode, data handling, telemetry, and sensitive

Spin up a live local Omnigent server and exercise the Cursor SDK harness end-to-end — build cursor agents, run real turns, smoke-test, and…

Configure SAML 2.0 and OIDC SSO for Cursor with Okta, Microsoft Entra

Use when performing customer data export — template for handling customer data export requests (data portability).

Only run this skill if the introducing commit is not already known.

Run read-only exposure checks for security advisories and write a structured local audit report.

Set up and run USB traffic capture with a Cynthion USB analyzer.

Cypress testing patterns, custom commands, component testing, and CI integration.

Best practices for using `expect` and `package:matcher`.

Apply Databricks security best practices for secrets and access control.

Run what this repository already defines (examples—substitute from package.json scripts, Makefile, CI config): Record in…

Deep security audit covering OWASP Top 10, authentication, authorization, data protection, dependency vulnerabilities, and secrets scanning.

Testing strategies and methodologies including TDD, E2E testing, and multi-framework support

Production-ready authentication framework for TypeScript with first-class Cloudflare D1 support.

Performs comprehensive C/C++ security review for memory corruption, integer overflows, race conditions, and platform-specific…

This skill provides comprehensive knowledge for integrating Clerk authentication in React, Next.js, and Cloudflare Workers applications.