Security & Testing Agent Skills for Windsurf (legacy)

Detect the test runner for a target directory, confirm the command with the user, run it, then write a markdown summary to…

ALWAYS USE before running .NET tests or answering with a test command or flags.

Guidelines and best practices for writing unit tests in the G2 visualization library, covering directory structure, testing patterns, and…

Hunt cloud / infrastructure misconfigurations.

Configure SalesLoft local development with API mocking and sandbox testing.

This skill enables Claude to perform comprehensive accessibility audits.

This skill enables Claude to automatically scan code and configuration files for potential data privacy vulnerabilities using the…

Main entry point for Prowler development - quick reference for all components.

Guides through Trail of Bits' 5-step secure development workflow.

Hardens code against vulnerabilities. Use when handling user input, authentication, data storage, or external integrations. Use when…

Use when the user asks to perform security audits, penetration testing, vulnerability scanning, OWASP Top 10 checks, or offensive security…

Security reconnaissance — full inventory of secrets management, IAM, dependencies, auth, encryption, audit logging, and compliance gaps.

Security audit of web projects (Laravel/PHP, Node/JavaScript/TypeScript, Python and apps with LLM/RAG/agents): detects the stack, runs…

LLM-powered semantic analysis of code diffs to detect business-logic trojans

Runs a Semgrep security scan over a codebase: detects languages, selects rulesets, presents the plan for explicit approval, then runs…

Audit a fleet of AWS security groups for the multi-hop lateral-movement path that no single ingress rule reveals.

Analyze text and images for harmful content with customizable blocklists.

Azure Key Vault Secrets SDK for Rust. Use for storing and retrieving secrets, passwords, and API keys. Triggers: "keyvault secrets rust"…

Step-by-step cookbook for setting up cryptographically signed audit trails on Claude Code tool calls.

Disciplined diagnosis loop for hard bugs and performance regressions.

Install Claude skills from GitHub repositories with automated security scanning.