Security & Testing Agent Skills

Binary Analysis & Reverse Engineering

Analyzes compiled binaries and assembly code to reconstruct program logic and identify implementation patterns.

Agent System Evaluation

Builds robust evaluation frameworks and multi-dimensional rubrics to systematically measure the performance and reliability of AI agent systems.

Web Application Testing

Automates local web application testing and browser interaction using Playwright scripts and server lifecycle management.

STRIDE Threat Modeling Patterns

Implements the STRIDE methodology to systematically identify, categorize, and mitigate security threats in system architectures.

Threat Mitigation Mapping

Maps identified security threats to specific technical controls and mitigations to automate risk treatment and defense-in-depth planning.

Web3 Smart Contract Testing

Tests smart contracts comprehensively using Hardhat and Foundry frameworks to ensure security, gas efficiency, and protocol reliability.

Kubernetes Security Policies

Implements production-grade Kubernetes security through NetworkPolicies, Pod Security Standards, and robust RBAC configurations.

Attack Tree Construction

Visualizes and analyzes potential security threat paths through systematic attack tree modeling and risk assessment.

SAST Security Configuration

Configures and automates Static Application Security Testing (SAST) tools to detect and remediate vulnerabilities in application code.

Data Quality Frameworks

Implements robust data validation using Great Expectations, dbt tests, and data contracts to ensure reliable data pipelines.

Authentication Implementation Patterns

Implements secure authentication and authorization systems using JWT, OAuth2, session management, and role-based access control.

E2E Testing Patterns

Implements robust end-to-end testing suites using Playwright and Cypress to ensure application reliability and prevent regressions.

WCAG Accessibility Audit & Compliance

Conducts comprehensive WCAG 2.2 accessibility audits and provides actionable remediation strategies for web content.

Screen Reader Testing

Validates web application accessibility by providing specialized guidance and command references for major screen readers like VoiceOver, NVDA, and JAWS.

Temporal Python Testing

Streamlines the testing of Temporal workflows in Python using pytest, time-skipping, and determinism validation strategies.

mTLS Configuration & Management

Configures and manages mutual TLS (mTLS) for zero-trust service-to-service communication across cloud-native environments.

Memory Safety Patterns

Implements robust memory-safe programming patterns and resource management across Rust, C++, and C.

GDPR Compliance & Data Handling

Implements GDPR-compliant data processing, granular consent management systems, and automated privacy controls within your applications.

Secrets Management for CI/CD

Implements secure storage, rotation, and management of sensitive credentials across various CI/CD platforms and cloud providers.

Systematic Debugging Strategies

Applies systematic debugging techniques, profiling tools, and root cause analysis to resolve complex software issues across any technology stack.

Solidity Smart Contract Security

Secures Ethereum smart contracts by implementing industry-standard protection patterns and identifying common vulnerabilities during the development process.

Python Testing Patterns

Implements comprehensive Python testing strategies using pytest, fixtures, and advanced mocking techniques.

Security Requirement Extraction

Transforms threat analysis and business context into actionable security requirements, user stories, and test cases.

JavaScript Testing Patterns

Implements comprehensive testing strategies for JavaScript and TypeScript applications using modern frameworks like Jest and Vitest.

Data Quality Frameworks

Implements production-grade data validation using Great Expectations, dbt tests, and data contracts to ensure reliable and trustworthy data pipelines.

Code Review Excellence

Enhances the code review process through structured feedback frameworks, systematic analysis phases, and language-specific security and performance checklists.

Temporal Python Testing

Implements robust testing strategies for Temporal workflows using pytest, time-skipping, and activity mocking to ensure reliability and determinism.

GDPR Data Handling

Implements GDPR-compliant data processing workflows, including consent management, data subject rights, and privacy-by-design architectures.

Kubernetes Security Policies

Secures Kubernetes clusters by implementing network isolation policies, pod security standards, and least-privilege RBAC configurations.

Bats Testing Patterns

Implements comprehensive unit testing for shell scripts using the Bash Automated Testing System (Bats) framework.