Testing & Security skills

Operately test layout, naming (.projections.json), factories, feature/e2e steps, external query/mutation auth specs, and how to run Elixir/API/JS/EE tests. Use when adding, renaming, splitting, or reviewing tests; choosing where a test belongs; writing Factory/TurboCase/FeatureCase or ExternalApi QuerySpec/MutationSpec tests; or running make test / feature tests.

The English summary is being prepared. Showing the original description.

Turn a customer problem into distinct ideas, a small prototype and a measurable learning test. Use for this Bot Generator Bot template; creates drafts or simulations within its declared scope.

The English summary is being prepared. Showing the original description.

Documents current architecture from implementation evidence; does not propose a target or audit fitness.

The English summary is being prepared. Showing the original description.

Audits cross-cutting codebase health, security and maintainability; not a single-change review or specialist audit.

The English summary is being prepared. Showing the original description.

Audits queries, transactions, consistency and persistence resource lifetimes; read-only.

The English summary is being prepared. Showing the original description.

Audits documentation and comments for trust, coverage, consistency and freshness; read-only.

The English summary is being prepared. Showing the original description.

Audits existing tests for risk coverage, reliable oracles and maintenance value; does not edit tests.

The English summary is being prepared. Showing the original description.

Audits implemented architecture boundaries, dependencies and ownership; not target design or plan review.

The English summary is being prepared. Showing the original description.

Builds, updates or retires scoped acceptance tests and verifies execution; does not repair product code.

The English summary is being prepared. Showing the original description.

Plans risk-based test portfolios and acceptance evidence; does not write or execute tests.

The English summary is being prepared. Showing the original description.

Reviews a completed change for acceptance, regressions and release risk; read-only, not a whole-codebase audit.

The English summary is being prepared. Showing the original description.

Test React Native components with Jest and React Native Testing Library. Use when writing Jest or React Native Testing Library tests for React Native components.

The English summary is being prepared. Showing the original description.

Finds Zephyr Scale test cases linked or relevant to Jira stories, ACs, modules, and release risks. Use for coverage analysis and traceability checks.

The English summary is being prepared. Showing the original description.

Test React components with RTL and Jest/Vitest. Use when writing React component tests with React Testing Library, Jest, or Vitest.

The English summary is being prepared. Showing the original description.

Prevent XSS, secure auth flows, and harden React client-side applications. Use when preventing XSS, securing auth flows, or auditing third-party dependencies in React.

The English summary is being prepared. Showing the original description.

Audits PR diffs for architecture boundary violations, design simplicity, dependency drift, and established-pattern mismatches. Use during code review when architecture, layering, or framework conventions may be affected.

The English summary is being prepared. Showing the original description.

Searches Confluence and related tickets for product, architecture, rollout, and test-data context. Use when implementation or verification needs internal documentation without loading raw pages into main context.

The English summary is being prepared. Showing the original description.

Turns approved AC/SRS into an executable test plan (scenarios, seed, selector gaps) for the test-loop workflow. Use for independent test-plan generation from stable requirements.

The English summary is being prepared. Showing the original description.

Inserts stable test ids into production components for each selector gap named by a test plan, following the per-framework insertion policy and never renaming existing ids. Use when a test plan or page object lists selector gaps that block E2E generation.

The English summary is being prepared. Showing the original description.

Strict quality-first TDD specialist. Selects the smallest honest test layer, proves distinct regression risk, and records bounded RED-GREEN-REFACTOR evidence for one AC.

The English summary is being prepared. Showing the original description.

High-density security audit persona. Enforces OWASP Top 10, Vibe Security, trust gating, and runtime hardening for code and agentic review flows.

The English summary is being prepared. Showing the original description.

Deep Mobile Security Red Team persona. Executes OWASP MASTG procedures including APK/IPA decompilation, Frida dynamic hooking, biometric bypasses, and local database decryption.

The English summary is being prepared. Showing the original description.

Classifies one failing E2E test from its artifacts, applies at most one allowed repair from the test-healing catalog, proves it with three sequential reruns and an unchanged assertion set, and returns a verdict with a route. Use per failure inside test-loop; never for production code changes.

The English summary is being prepared. Showing the original description.

Red Team persona for Business Logic and Auth manipulation. Generates and executes stateful fuzzing scripts (Playwright/Python) to test RBAC bypasses, BOLA/IDOR, race conditions, and complex multi-step transaction flaws.

The English summary is being prepared. Showing the original description.