Security & Testing Agent Skills for Windsurf (legacy)

Secure Figma API tokens, configure scopes, and validate webhook signatures.

Apply Firecrawl security best practices for API key management and webhook

Streamlines the auditing and reverse engineering workflow for IoT and embedded device firmware using industry-standard methodologies.

Pytest testing patterns for Python. Trigger: When writing or refactoring pytest tests (fixtures, mocking, parametrize, markers). For…

On-chip debugging skill with ILA, VIO, and related FPGA debug tools

Design, run, and interpret high-signal fuzzing campaigns that generate many reproducible experiments without mistaking random volume or…

Expert skill for Gatling simulation development, load test execution, and performance analysis.

Generate Playwright tests. Use when user says "write tests", "generate tests", "add tests for", "test this component", "e2e test", "create…

DO NOT USE when the target already consumes an injected interface or built-in abstraction such as IFileSystem or TimeProvider, even if the…

Deep integration with Ghidra and IDA Pro for binary analysis and reverse engineering

use this when you need a valid fixture for skillcheck demos

Grade specified test methods individually and produce a concise PR-ready table with each fully qualified test name, an A-F grade, score…

Cross-phase audit of all outstanding UAT and verification items

Retroactively verify threat mitigations for a completed phase

Validate built features through conversational UAT

Use when an operation can fail while still returning valid-looking output - CAD/geometry booleans, image and mesh pipelines, renderers…

Hardens the Docker daemon (dockerd) through /etc/docker/daemon.json with user namespace remapping, TLS client authentication, seccomp…

Hardens Windows endpoints using CIS (Center for Internet Security) Benchmark

Hermes-only runtime security attestation and drift detection skill for operator-managed Hermes infrastructure.

Hunt for malicious PowerShell activity by analyzing Script Block Logging

Detect C2 beaconing patterns in network traffic using frequency analysis,