Security & Testing Agent Skills for Windsurf (legacy)

Use when setting up nono to run Claude Code securely, creating or modifying nono profiles, adding per-session filesystem permissions, or…

Audit an Effect codebase for silent error swallowing -- catchAll patterns that collapse errors into sentinel values (null, [], false…

OWASP compliance, vulnerability scanning, and adversarial red team testing — use for security reviews

Use when encountering any bug, test failure, or unexpected behavior, before proposing fixes

Use when implementing any feature or bugfix, before writing implementation code

Use when about to claim work is complete, fixed, or passing, before committing or creating PRs - requires running verification commands…

Write and run Odoo automated tests using TransactionCase, HttpCase, and browser tour tests.

Penetration testing, ethical hacking, and vulnerability assessment techniques for authorized security testing

Implement secure authentication, token management, and permission scoping

Audits web components and applications for WCAG 2.2 accessibility compliance, covering color contrast, semantic HTML, keyboard navigation…

Open-source pipeline: fork, sanitize, and package private projects for safe public release.

Inspect, patch, validate, publish, or confirm OpenClaw GHSA security advisories and private-fork state.

7-stage super workflow for GitHub repo audit, cleanup, PR review, and competitor analysis

Run deterministic OpenSkills end-to-end validation across runtime tests and example agents, then report tool calls, activation behavior…

Diagnose openskills-runtime execution failures in sandboxed paths (Landlock, seatbelt, native script execution, wasm execution) and…

Supply-chain security audit — Composer + npm dependency CVE check, license compatibility (GPL-compatible only), abandoned package…

Execute work units through the rigorous 4-phase Metaswarm cycle (Implement -> Validate -> Adversarial Review -> Commit) with independent…

This skill enables Claude to orchestrate complex test workflows using the test-orchestrator plugin.

Evaluate execution with three-stage verification pipeline

Test a live OutSystems app after a change lands: run SQL against its Dev database (db_query), invoke server actions in the running app…

Automates software development overnight using Git hooks to enforce test-driven development (TDD).