Security & Testing Agent Skills for Windsurf (legacy)

Investigates insider threat indicators including data exfiltration attempts,

Forensically preserve memory and disk, collect ransom notes and encrypted file samples, and identify the ransomware variant using tools…

Evaluates IP addresses and proxy nodes across registries, geolocation consensus, fraud scores, and AI service accessibility.

Automate Ip2proxy tasks via Rube MCP (Composio).

Automate Ip2whois tasks via Rube MCP (Composio).

Functional safety process and analysis support per ISO 26262

When to activate: ISO 27001, ISMS, information security management, Annex A controls, risk assessment, certification, surveillance audit…

Use when implementing ISO 27001 controls — ISMS, risk assessment, and annex controls.

When to activate: Java testing, JUnit 5, Mockito, AssertJ, Testcontainers, WireMock, Spring MVC test, parameterized tests

Best practices for writing JavaScript and TypeScript tests using Jest, including mocking strategies, test structure, and common patterns.

Use when writing or fixing TypeScript types for Jest mocks, spies, and replaced properties.

Run the full Jidoka check suite and act on what it finds.

Apache JMeter expertise for enterprise-grade load and performance testing

Implements a rigorous four-stage investigative framework to identify root causes and deliver stable, long-term software fixes.

Deep integration with JTAG/SWD debug probes for hardware-level debugging and flash programming

JWT creation, validation, and management for SDK authentication

Guides multi-tenant authorization where a JWT claim carries a tenant/organization identifier that every endpoint must check against the…

Comprehensive k6 load testing skill for API, browser, and scalability testing.

Generate and run a comprehensive test suite for Express.js REST API endpoints.