Security & Testing Agent Skills for Windsurf (legacy)

Polyglot, parse-only static analysis that pairs source files with referencing tests across Python, TypeScript/JavaScript, Go, Java, Rust…

Find bugs in the current codebase through a number of time-tested methodologies.

Runs a FIPS 140-3 crypto compliance audit across Go repositories, classifying every crypto/ import by risk and generating per-component…

Classifies an individual FIPS crypto audit finding as real cryptography or a non-cryptographic use of a crypto primitive, using structured…

Generates component-specific FIPS remediation TODO lists from crypto audit results, with effort estimates and suggested PR sequencing.

Firebase and Google Identity Platform security testing — full attack-surface coverage with per-section "Report when" criteria and the…

Connect a customer agent to Coval and complete a small first evaluation with inspected voice or chat results.

Run zero-shelter on this project for the first time and wire it in.

Fetches recent integration and e2e test failures from Future-Mortgage/shipyard GitHub Actions…

Fix System Test Command — debug failing/flaky system tests with Playwright and fix the test and/or application code

Guides an agent through reproducing, root-causing, fixing, and validating flaky tests in the PostHog monorepo.

Guide Angular (2+) application testing toward comprehensive, version-aware, maintainable coverage.

Builds security-focused full-stack web applications by implementing integrated frontend and backend components with layered security at…

Jailbreak LLMs: Parseltongue, GODMODE, ULTRAPLINIAN.

Audits web applications and architectures for compliance with GDPR, CCPA, and other privacy regulations, focusing on consent, data…

Check whether a known credential has already leaked publicly via GitGuardian's HasMySecretLeaked (HMSL) hash-lookup service.

Use when generating or planting GitGuardian honeytokens, canary tokens, decoys, or tripwire credentials.

Scan a developer's entire machine for credentials across local git repositories, dotfiles, ~/.aws/credentials, ~/.kube/config…

Audit and safely manage GitHub repositories with gh CLI.

Use when the user asks OpenSRE to fix GitHub security and quality issues, Security and quality page findings, Code Quality standard…

Remediate GitHub security / Dependabot / CodeQL / code-quality alerts via fix_github_security_alert