Security & Testing Agent Skills for Windsurf (legacy)

Use whenever a server error with a structured payload flows into a UI error handler.

Find the actual cause of an admitted failure instead of a plausible one using a systematic empirical method grounded in Agans and Zeller…

Write code that resists attack — parameterizing rather than escaping, encoding for the right output context, checking authorization per…

Refute your own work before delivering it.

Pre-publish safety audit for a professional's public GitHub presence.

Post-quantum cryptography evaluation skill for quantum-safe migration

Use when reviewing a pull request for security issues — automatically analyzes the diff for vulnerabilities, hardcoded secrets, injection…

Audits Product Requirement Documents across seven interaction dimensions to identify missing UI logic, edge cases, and specification gaps.

Pre-commit review: security scan, quality gates, auto-fix.

Review prediction-market, basket, oracle, and trading-agent workflows for compliance, safety, data-quality, privacy, and execution risk.

Client-facing red-team deliverable format — codifies the Subject / Observations / Description / Impact / Recommendation / PoC structure…

Authors ModSec rules, APF/CSF/iptables/nftables firewall blocks, and LMD/ClamAV signature submissions for confirmed attack patterns.

Polish a generated CLI to pass verification and become publish-ready.

Skill for the Privacy area of Securacy. 73 symbols across 9 files.

Use when building apps that collect user data.

Draft a detailed privacy policy covering data types, jurisdiction, GDPR and compliance considerations, and clauses needing legal review.

Provide comprehensive techniques for escalating privileges from a low-privileged user to root/administrator access on compromised Linux…

Process Failure Mode and Effects Analysis (PFMEA) skill for manufacturing risk assessment

Processes STIX 2.1 threat intelligence bundles delivered via TAXII 2.1

Run the ProdGuard scanner on a repo to catch the security controls an AI coding agent turns off to make something work.

Autonomously deep-scan entire codebase line-by-line, understand architecture and patterns, then systematically transform it to…