Security & Testing Agent Skills for Windsurf (legacy)

Fraud risk assessment skill based on the fraud triangle with red flag detection

Assess FreePBX/Asterisk UCP login, astdb, webshell traps.

Expert in secure frontend coding practices specializing in XSS prevention, output sanitization, and client-side security patterns.

When to activate: Vitest, Testing Library, MSW, Playwright, visual regression, a11y testing, component tests, E2E tests

You are an expert software engineer specializing in writing rock-solid RSpec tests for ViewComponents in Rails applications.

Senior-QA-engineer orchestrator. Audits the entire application across every relevant role and feature using Playwright, producing a…

Orchestrator that fixes every bug found by /full-qa.

This skill enables Claude to perform automated fuzz testing on APIs to discover vulnerabilities, crashes, and unexpected behavior.

Comprehensive fuzzing operations with AFL++, libFuzzer, and OSS-Fuzz integration

Audit TanStack AI provider adapters for feature parity gaps and outdated model lists.

Guide for deploying and starting Gatling tests on Gatling Enterprise.

Build features and fix bugs using a strict Test-Driven Development workflow (Red-Green-Refactor), with regression-first bugfixing and…

GDPR compliance assessment and automation for data mapping, consent management, DSAR handling, and privacy impact assessments

When to activate: GDPR, data protection, EU privacy, personal data, data subject rights, DPA, lawful basis, consent, data breach, DPIA…

Scan for GDPR compliance issues in data handling and privacy practices.

Practical implementation guide for GDPR-compliant data processing, consent management, and privacy controls.

Expand and refine the evaluation suite for a Langium DSL project.

Run the agent-generator regression net. Use after ANY change under packages/crm/src/lib/agents/generate/** (parse-intent, agent-bundle…

Generate qtip scenario YAML files from a PRD, GitHub issue, or user story.