Security & Testing Agent Skills

Spring Boot Configuration Unit Testing

Streamlines unit testing for Spring Boot @ConfigurationProperties using ApplicationContextRunner for fast and reliable configuration validation.

Java Parameterized Unit Testing

Implements efficient JUnit 5 parameterized testing patterns to execute single test methods with multiple data combinations and boundary cases.

Java Bean Validation Testing

Streamlines the creation of lightweight unit tests for Jakarta Bean Validation constraints and custom validators without requiring a Spring context.

Spring Boot JWT Security

Implements production-ready JWT authentication and role-based access control for Spring Boot 3.5 applications using Spring Security 6.x.

Java Async & Scheduled Unit Testing

Simplifies unit testing for Spring @Async and @Scheduled methods using standardized JUnit 5, Mockito, and Awaitility patterns.

Java REST Controller Unit Testing

Generates comprehensive unit tests for Spring Boot REST controllers using MockMvc and Mockito to validate API endpoints in isolation.

Web Application Testing & Audit

Streamlines web application testing with comprehensive E2E strategies, Playwright automation, and systematic deep audit workflows.

Agent Performance Evaluation

Establishes robust frameworks for measuring, testing, and optimizing AI agent performance through multi-dimensional rubrics and LLM-as-judge methodologies.

Critical Code Reviewer

Conducts rigorous, adversarial code reviews across multiple languages to identify security vulnerabilities, performance bottlenecks, and poor coding patterns.

GitHub Integration Test Reporter

Automates the creation of detailed GitHub issues for local integration test failures by analyzing logs and agent metadata.

Shell Script Audit & Review

Audits shell and Bash scripts for correctness, safety, and cross-platform portability to ensure reliable automation.

Hookify Rule Writer

Enforces safety guardrails and coding standards by creating custom behavioral rules for Claude Code.

Proof of Work

Enforces rigorous validation, testing, and evidence-based reporting before any task is declared complete.

FPF Architecture Review

Conducts systematic architectural audits using the Functional, Practical, and Foundation (FPF) framework to evaluate system design and quality.

Subagent Skill Testing

Validates Claude Code skills using a TDD-style methodology and fresh subagent instances to eliminate priming bias.

Automated Root Cause Bugfixer

Resolves software defects through mandatory root cause analysis, automated regression testing, and structured verification.

Codex Code Review

Automates comprehensive code reviews using the Codex CLI to identify bugs, security vulnerabilities, and logic errors.

Automated Test Runner

Detects project test frameworks and executes suites to generate structured JSON checkpoints of pass/fail results.

Skill Security Scanner

Audits Claude Code skills for security vulnerabilities, prompt injection, and malicious patterns before installation.

Warden Code Analysis

Analyzes code changes and executes configurable AI skills to generate structured security and bug reports.

Find Bugs & Security Audit

Identifies security vulnerabilities, logical bugs, and code quality issues in local git branch changes.

Security Code Review

Performs systematic security audits to identify exploitable vulnerabilities like XSS, SQL injection, and authentication flaws with high-confidence reporting.

Django Access Control Reviewer

Performs deep security audits on Django applications to identify and fix Broken Object Level Authorization (BOLA) and IDOR vulnerabilities.

Warden Lint Judge

Transforms AI-detected code findings into permanent, deterministic lint rules to prevent recurring bugs.

Clerk Auth Implementation & Migration

Streamlines Clerk authentication setup with patterns for Next.js 16, API keys beta, and 2025-11-10 breaking changes.

Better Auth

Streamlines the implementation of secure, self-hosted authentication systems for TypeScript and Cloudflare Workers environments.

Cloudflare Turnstile Integration

Implements privacy-first bot protection and CAPTCHA alternatives for web applications and forms.

Security Patterns for Claude Code

Implements production-grade security patterns for authentication, input validation, OWASP compliance, and LLM safety.

Testing Patterns Hub

Redirects to specialized testing sub-skills for unit, E2E, integration, LLM, and performance testing automation.

Testing Patterns Hub

Redirects users to specialized testing sub-skills for unit, E2E, integration, LLM, and performance testing.