Security & Testing Agent Skills for Zed

This skill should be used when the user asks "why is this string length wrong", "how do I truncate text safely", "why do these identical…

Use when writing or reviewing unit tests.

Structure tests around observable behavior and realistic dependency boundaries — choosing between a real object, a stub, and a mock…

Use when supplied or retrieved content may contain instructions that conflict with the authorized task.

Review or change test limits with scale, unit, environment, variant, structure, and provenance controls.

Hunt file upload bugs — RCE via webshell, XSS via SVG/HTML, SSRF via XXE in DOCX, path traversal via filename.

When you need to call a service the org has a SHARED credential for (a SERP/search key, a paid-API key, a data-vendor feed, a Git remote)…

Use when installing language dependencies (npm, pip/uv/PDM, Go modules) in an environment whose only route to a package registry is a…

Use when the agent needs to clone/fetch/push a git repository, manipulate pull requests and query CI status/logs, or…

Use-related risk analysis skill for identifying hazards associated with user interaction per IEC 62366-1

Use when packaging artifacts for USENIX Security Symposium evaluation — the mandatory Phase-1 availability check that acceptance is…

Use when designing or auditing the evaluation of a USENIX Security Symposium paper — building threat-model-faithful experiments…

Deep expertise in Universal Verification Methodology (IEEE 1800.2) for FPGA verification

Create and audit durable verification and validation evidence for software, documentation, configuration, or operations.

Gate a built v1 to go / no-go on two recorded tests — a true stranger reaches first correct value in ≤60 seconds unaided, AND the…

Diagnosis loop for hard bugs and performance regressions.

Validate AGENTS.md files for structural completeness, operational contract coverage, neutrality, and repository alignment.

Validate that a branch or pull request implementation matches introduced product, technical, security, and related specs.

Use after code changes or before handoff to choose and run validation proportional to risk.

This skill validates API contracts using consumer-driven testing and OpenAPI validation.

Validates backup integrity through cryptographic hash verification,