Security & Testing Agent Skills

QA Screenshot Management

Standardizes screenshot capture, naming, and organization to ensure visual traceability and consistency during QA testing.

Assertion Helper

Generates specific, context-rich test assertions and actionable error messages across multiple programming languages and frameworks.

FTC Youth Safety Review

Audits code and comments to ensure content appropriateness for youth audiences and educational environments.

Systematic Debugging Framework

Enforces a rigorous four-phase debugging workflow to identify root causes and ensure reliable software fixes before attempting implementation.

Ruzzy Rust Fuzzing

Automates Rust vulnerability discovery using the Ruzzy fuzzing framework to identify security flaws and crashes.

NERV LocalSend Connectivity Tester

Facilitates rapid peer discovery and LocalSend connectivity testing with integrated Italian voice announcements.

Narya Formal Proofs

Mechanically verifies event-sourced systems by generating cryptographic proof certificates for consistency, determinism, and data integrity.

Clerk Auth for Next.js & Convex

Integrates robust Clerk authentication patterns into Next.js applications with Convex backend synchronization.

OAuth Implementation

Implements secure OAuth 2.0 and OpenID Connect authentication flows using standardized industry patterns and security best practices.

Move Smith Fuzzer

Implements differential fuzzing and property-based testing for Move smart contracts to identify consensus-breaking bugs and edge cases.

QA Test Management

Manages the end-to-end QA test lifecycle with automated naming conventions, directory structures, and traceability to requirements.

Mandatory TDD/BDD Testing

Enforces a strict test-driven development workflow with BDD syntax and mandatory coverage requirements for reliable code.

LocalSend Protocol Analysis

Analyzes LocalSend repositories using tree-sitter tagging, GitHub GraphQL snapshots, and protocol safety assessments.

Code Quality Evaluator

Evaluates code implementations for build integrity, type safety, and architectural consistency within development loops.

Kolmogorov Codex Quest

Verifies multi-layer cryptographic identity proofs and orchestrates complex quest fulfillment within the Plurigrid ASI ecosystem.

macOS Keychain Secure

Secures sensitive credentials using the hardware-backed macOS Keychain with mathematically balanced GF(3) lifecycles.

RAG/CAG Security Patterns

Secures retrieval-augmented and cache-augmented generation systems through multi-tenant isolation, document-level access control, and prompt injection prevention.

JavaScript Testing Patterns

Implements comprehensive testing strategies for JavaScript and TypeScript applications using modern frameworks like Jest and Vitest.

MITM Audit & Analysis

Monitors and reports man-in-the-middle (MITM) mentions and patterns across local repositories and history files.

IoT Device Provisioning

Manages secure provisioning, certificate installation, and network onboarding for TizenRT and ARTIK IoT devices.

QA Screenshot Validation

Validates UI screenshots for layout integrity, element clipping, and rendering issues with intelligent viewport handling.

Intent Sink Validator

Validates and sanitizes intent-centric architectures to ensure safety and well-formedness before execution.

Smart Contract Guidelines Advisor

Provides expert smart contract development advice and security reviews based on Trail of Bits' industry-standard best practices.

Goblins Distributed OCap System

Implements a secure, distributed object capability system for autopoietic actor-based communication and peer-to-peer networking.

Code Review

Performs comprehensive audits of modified code to identify security vulnerabilities, performance bottlenecks, and violations of project-specific coding standards.

Testing Infrastructure

Implements comprehensive testing infrastructure and patterns for monorepos using Vitest, React Testing Library, and Storybook.

Gestalt Hacking (ERGODIC 0)

Leverages gestalt principles to analyze, manipulate, and defend emergent perceptual patterns within complex data streams and cybernetic loops.

Fuzzing Obstacles & Effectiveness

Identifies and overcomes common fuzzing bottlenecks to improve software security testing coverage and bug discovery.

Business Logic Evaluator

Evaluates complex business logic, state machines, and product rule compliance within automated development loops.

fnox Secrets Management

Manages encrypted secrets using age encryption and DuckDB-based catalogs within a triadic GF(3) framework.