Security & Testing Agent Skills for Windsurf (legacy)

Use when adding or extending real mobile-device coverage to a Playwright suite — touch/tap specs, Pixel or iPhone device descriptors…

Create maintainable and reusable Page Object Models (POMs) for Playwright tests.

Inspect Playwright trace files from the command line — list actions, view requests, console, errors, snapshots and screenshots.

Use when hardening a PLDI paper's measurements against the SIGPLAN Empirical Evaluation Guidelines — warmup and steady-state discipline…

Reverse Engineering Skill

Demonstrate Poisoned Pipeline Execution (PPE / CICD-SEC-4) during an authorized assessment — injecting attacker-controlled build steps…

Enforce access via Policies and Gates; use authorize() and authorizeResource() to standardize controller protections

Audit the allow/deny/ask rules across the user, project and local settings scopes, then dedupe them and promote read-only rules up the…

End-to-end test the polly multi-agent coding orchestrator's critical user journeys (CUJs).

Convert Postman collections to automated tests with environment preservation

Printing Press CLI for Printing Press Rich.

Provides guidance for property-based testing across multiple languages and smart contracts.

Simulates a multi-perspective QA advisory board to review requirements, technical designs, and test plans while surfacing blind spots and…

Use it when a developer wants to start writing tests for a module, prepare a release, research existing coverage, or…

Quarantines an intermittently failing test behind a ticket with an owner and expiry, assigns a root-cause bucket from isolated reruns, and…

Proves the system works by writing and executing comprehensive test suites.

This skill should be used when the user asks to "check for race conditions", "find TOCTOU bugs", "analyze concurrency issues", "detect…

Security audit, hardening, threat modeling (STRIDE/PASTA), Red/Blue Team, OWASP checks, code review, incident response, and infrastructure…

Provide comprehensive techniques for attacking Microsoft Active Directory environments.

Evaluate agent behavior with versioned cases and explicit verifiers.

Audits GitHub Actions workflows for security vulnerabilities in AI agent integrations including Claude Code Action, Gemini CLI, OpenAI…