Security & Testing Agent Skills for Windsurf (legacy)

Use this skill when integrating Cloudflare Zero Trust Access authentication with Cloudflare Workers applications.

Scans a codebase for security vulnerabilities using CodeQL's interprocedural data flow and taint tracking analysis.

Detects timing side-channel vulnerabilities in cryptographic code.

Laravel security best practices for authn/authz, validation, CSRF, mass assignment, file uploads, secrets, rate limiting, and secure…

Load testing with k6/Artillery, response time thresholds, memory leak detection, N+1 query detection, and CI integration.

Use when finishing a feature, fixing a bug, before committing React code, or when the user types `/doctor`, asks to scan, triage, or clean…

Cross-stack source code asset audit — classifies every file, detects embedded third-party libraries, and delivers actionable four-level…

Use when errors occur deep in execution and you need to trace back to find the original trigger - systematically traces bugs backward…

Creates language variants of existing Semgrep rules.

Visualize whether skills, rules, and agent definitions are actually followed — auto-generates scenarios at 3 prompt strictness levels…

Verifies code implements exactly what documentation specifies for blockchain audits.

Identifies dependencies at heightened risk of exploitation or takeover.

Use this skill when writing new features, fixing bugs, or refactoring code.

Guides authoring of high-quality YARA-X detection rules for malware identification.

De-identify clinical research data before LLM-assisted analysis.

Use early when debugging a medium or hard bug, especially when tests alone may not reveal the real runtime failure.

Use when working with debugging toolkit smart debug (Alias for debugging-toolkit-smart-debug)

You are a dependency security expert specializing in vulnerability scanning, license compliance, and supply chain security.

Dependency Auditor

Demonstrate dependency confusion / substitution (CICD-SEC-3, dependency-chain abuse) during an authorized assessment — getting a build to…

You are a security expert specializing in dependency vulnerability analysis, SBOM generation, and supply chain security.