Security & Testing Agent Skills for Windsurf (legacy)

Orchestrate OWASP-based application and API security reviews and route findings to the appropriate specialized security skill.

Apply when debugging. Trace each symptom to its root cause and fix it there; reproduce first, ask why until you reach it, resist nil-check…

Configure Palantir Foundry enterprise access control with project roles,

Review payment data flows and engineering control evidence for a scoped PCI assessment, without claiming certification.

PCI DSS compliance assessment and reporting for cardholder data protection, SAQ automation, and ASV scan orchestration

When to activate: PCI DSS, PCI compliance, payment card security, cardholder data, SAQ, QSA, card data environment, tokenization, network…

Validate PCI-DSS compliance for payment card data security.

Orchestrates authorized penetration testing, vulnerability scanning, and security auditing across network and web targets using over 20…

Capture performance baselines before migration for regression comparison and SLA verification

Execute load testing, stress testing, and performance benchmarking.

Use BloodHound and SharpHound (or AzureHound) to enumerate Active Directory

Investigate Active Directory compromise by analyzing authentication logs,

Conduct a focused Active Directory penetration test using BloodHound,

Detect and respond to Adversary-in-the-Middle (AiTM) phishing attacks

Use AI/LLM-based reasoning with Sherlock, theHarvester, and SpiderFoot

Simulates ARP spoofing/cache-poisoning attacks in authorized lab or

Build a multi-factor asset criticality scoring model—incorporating data

Plan and run authenticated (credentialed) vulnerability scans with scanners such as

Deploy and operate the CAPEv2 malware sandbox (a Cuckoo derivative) to run samples in a

Performing authorized privilege escalation assessments in AWS environments

Assess Bluetooth Low Energy (BLE) device security using Python's bleak asyncio