Security & Testing Agent Skills

Security Scan

Performs deep, whole-codebase security audits using extensive context windows to detect vulnerabilities, logic flaws, and cross-module data flow issues.

Debugging Strategies

Employs systematic methodologies and advanced profiling tools to identify, isolate, and resolve complex software bugs across multiple tech stacks.

TDD Workflow Pro

Enforces a strict Test-Driven Development cycle with mandatory failing tests, execution gates, and comprehensive logging for reliable software implementation.

Electron E2E Testing & Automation

Automates and debugs Electron desktop applications using Chrome DevTools Protocol for comprehensive end-to-end testing of both renderer and main processes.

macOS Desktop Automation (Hammerspoon)

Automates macOS native applications and system workflows using Hammerspoon for end-to-end testing and desktop control.

Advanced E2E Testing & TDD Orchestrator

Enforces rigorous end-to-end testing protocols and routes tasks to specialized web and desktop automation tools using a TDD-first approach.

Descope Authentication

Integrates secure, passwordless authentication and user management into web applications using Descope SDKs and Flows.

Bluebook Audit Verification

Verifies Bluebook citation corrections in DOCX files by re-scanning for formatting, cross-references, and signal consistency.

Linux Desktop Automation & Testing

Automates and tests Linux desktop applications across Wayland and X11 environments using native tools and D-Bus interfaces.

Python Testing Patterns

Implements comprehensive Python testing strategies using pytest, mocking, and fixtures to ensure code reliability and high coverage.

Hook Development for Claude Code

Automates and secures Claude Code workflows using event-driven hooks for tool validation and session management.

SaaS Tenant Data Isolation

Implements advanced cryptographic isolation and secure key management for multi-tenant SaaS applications.

Secrets Management

Designs and implements secure storage, rotation, and lifecycle patterns for credentials, API keys, and certificates.

Chainguard Container Image Migration

Automates the migration of Dockerfile FROM statements to secure, minimal Chainguard container images.

GDPR Compliance Planner

Provides comprehensive guidance and implementation patterns for building GDPR-compliant data systems and privacy controls.

Chaos Engineering Fundamentals

Implements proactive resilience testing through controlled fault injection experiments to discover system weaknesses before they cause outages.

Bats Testing Patterns

Implements comprehensive unit testing and TDD patterns for shell scripts using the Bash Automated Testing System (Bats).

TDD Workflow Assistant

Enforces a rigorous Test-Driven Development (TDD) methodology through the Red-Green-Refactor-Commit cycle for high-quality software delivery.

Apache License 2.0 Compliance Guide

Ensures derivative software projects adhere to Apache License 2.0 requirements for attribution, documentation, and redistribution.

Holochain Tryorama Testing

Facilitates comprehensive testing for Holochain applications using Tryorama through multi-agent simulations, performance benchmarking, and complex economic workflow validation.

Security Test Planning

Develops comprehensive security testing strategies including OWASP alignment, penetration test scoping, and automated SAST/DAST integration.

Authorization Models & Access Control

Provides comprehensive architectural guidance and implementation patterns for RBAC, ABAC, ACL, and ReBAC permission systems.

SaaS Compliance Frameworks

Implements security controls and regulatory patterns for SOC 2, GDPR, HIPAA, and other SaaS compliance frameworks.

Zero Trust Architecture

Implements zero-trust security principles including ZTNA, micro-segmentation, and identity-first access for cloud-native applications.

CodeQL Security Analysis

Interprets CodeQL SARIF outputs to identify, validate, and remediate complex security vulnerabilities through deep semantic dataflow analysis.

Security Reviewer

Performs comprehensive security audits, threat modeling, and SLSA compliance checks to ensure production-grade software security.

Test Pyramid Design

Architects optimized test distribution strategies and identifies testing anti-patterns to ensure fast, reliable development pipelines.

Testing Strategy Framework

Implements comprehensive software testing architectures using TDD methodology, the test pyramid, and automated validation patterns.

HyperFleet Standards Audit

Audits local repositories against architectural standards and generates JIRA-ready gap specifications for team compliance.

SafeRun Guard Status

Monitors and reports the operational status, security rules, and execution activity of the SafeRun Guard firewall.