Security & Testing Agent Skills

.NET Code & Security Analyzer

Automates .NET codebase audits by scanning for unused NuGet packages, code quality violations, and security vulnerabilities.

UFW Firewall Management

Simplifies Linux network security by providing streamlined commands for configuring and maintaining the Uncomplicated Firewall.

Acceptance Criteria Verification

Verifies feature implementation against defined acceptance criteria and generates automated verification reports on GitHub issues.

Security Ownership Map

Analyzes git history to map security ownership topology, calculate bus factors for sensitive code, and identify high-risk maintenance clusters.

Protocol Reverse Engineering

Analyzes, documents, and dissects complex network protocols for security research, debugging, and interoperability.

TDD & Full Coverage

Enforces a strict Red-Green-Refactor cycle with a 100% code coverage requirement for reliable feature implementation and bug fixes.

Ralph Loop: Iterative Development

Automates a rigorous test-driven development cycle for AI agents by looping through implementation, testing, and debugging until all checks pass.

Code Quality & Security Reviewer

Ensures code excellence and security by performing systematic reviews based on industry best practices and rigorous safety standards.

Cursor Compliance Audit

Executes security and regulatory compliance auditing for Cursor usage to ensure SOC 2, GDPR, and HIPAA standards are maintained.

Security Misconfiguration Auditor

Identifies and remediates security misconfigurations in infrastructure-as-code, application settings, and system configurations.

CSP Config Generator

Generates and implements strict Content Security Policy (CSP) configurations for Next.js applications to mitigate XSS risks and control resource loading.

Performance Test Suite

Automates the design, execution, and analysis of load, stress, and endurance tests to identify system bottlenecks and optimize application performance.

Windsurf Dependency Management

Automates dependency updates and security vulnerability scanning across multiple package managers within the Windsurf environment.

Ideogram Enterprise RBAC

Configures enterprise-grade role-based access control and SSO integration for Ideogram services.

Accessibility Checker CI

Integrates automated WCAG accessibility testing and reporting into CI/CD pipelines using industry-standard tools like axe-core and pa11y-ci.

Input Validation & Injection Scanner

Automates the detection of input validation vulnerabilities and injection risks to harden application security.

MoAI Development Workflow & QA

Automates the full development lifecycle from test-driven development and debugging to performance optimization and multi-agent code reviews.

ThinkDeep Reasoning & Investigation

Conducts systematic multi-step investigations using hypothesis tracking and progressive confidence modeling to solve complex technical problems.

TDD Workflow

Automates the Test-Driven Development cycle for autonomous feature implementation and high-integrity code generation.

Clerk Authentication Specialist

Implements modern, secure authentication flows using Clerk, including WebAuthn, passkeys, and pre-built UI components.

Encryption & Security Auditor

Secures sensitive data through automated encryption, decryption, and comprehensive cryptographic practice validation.

Verification & Quality Assurance

Ensures code reliability and agent output quality using real-time truth scoring and automated rollback systems.

Security Audit & OWASP Compliance

Performs comprehensive security reviews and code audits using the OWASP Top 10 framework to identify and remediate vulnerabilities.

Verification & Quality Assurance

Maintains codebase integrity through real-time truth scoring, automated security checks, and intelligent rollback mechanisms.

FastAPI DDD Testing Suite

Guides unit testing for Python applications using FastAPI and Domain-Driven Design by providing structured patterns for domain and use case layers.

MoAI AST-Grep Code Intelligence

Performs structural code search, security scanning, and semantic refactoring using Abstract Syntax Tree analysis across 40+ languages.

Quality Gate for Task Master

Enforces code quality standards by running linting, type-checking, and test suites before tasks can be marked as completed.

Debugging

Guides developers through a systematic, hypothesis-driven investigation to identify and resolve software bugs, performance issues, and logic errors.

GitHub Code Review Swarm

Orchestrates specialized AI agents to perform comprehensive, automated code reviews covering security, performance, and architecture within GitHub pull requests.

GitHub Code Review

Performs comprehensive, multi-agent code reviews on GitHub pull requests using specialized AI swarms for security, performance, and architecture analysis.