Testing & Security skills

Automate detection, enrichment, and response playbooks for a SOC you operate. Keep humans in the loop for destructive actions.

The English summary is being prepared. Showing the original description.

Provides expert knowledge of the testing pyramid, test design principles, MockK patterns, and integration testing conventions for Spring Boot + Kotlin projects.

The English summary is being prepared. Showing the original description.

Analyze suspicious artifacts in an isolated lab to contain and recover. For incident responders on owned estates. Never write, improve, or distribute malware.

The English summary is being prepared. Showing the original description.

Provides expert knowledge of the testing pyramid, test design principles, MockK patterns, and integration testing conventions for Spring Boot + Kotlin projects.

The English summary is being prepared. Showing the original description.

Advise on defensive security for industrial control systems you operate. Safety first. No process-disruption guidance.

The English summary is being prepared. Showing the original description.

Audits Tailwind CSS usage ensuring mobile-first responsive utilities and clean classes.

The English summary is being prepared. Showing the original description.

Performs simple mutation testing to verify test coverage and assertions.

The English summary is being prepared. Showing the original description.

Review and harden web apps (authz, XSS, CSRF, SSRF, injection) on code you maintain. Complements the OWASP `security` skill. No exploit kits.

The English summary is being prepared. Showing the original description.

Harden iOS/Android apps you ship: storage, TLS pinning policy, IPC, and backend trust. You still enforce authz on the server.

The English summary is being prepared. Showing the original description.

Choose and review cryptographic usage in your codebase: TLS, hashing, KMS, secret storage. Prefer standard libraries and vetted constructions.

The English summary is being prepared. Showing the original description.

Harden IAM, storage, keys, and org policies in cloud accounts you administer. Focus on identity, logging, and public-exposure controls.

The English summary is being prepared. Showing the original description.

Improve detections, hardening, and response for the estate you defend. Detection-as-code and control design, not offense.

The English summary is being prepared. Showing the original description.

Audits Hibernate database interactions to prevent N+1 query problems in JVM apps.

The English summary is being prepared. Showing the original description.

Audit web pages for performance optimization following PageSpeed Insights guidelines. Use when analyzing page performance, optimizing web applications, reviewing performance metrics, implementing Core Web Vitals improvements, or when the user mentions page speed, performance optimization, Lighthouse scores, or Core Web Vitals.

The English summary is being prepared. Showing the original description.

Harden LLM and agent integrations you operate: prompt injection, tool allowlists, secret leakage, and supply-chain of models. Defensive only.

The English summary is being prepared. Showing the original description.

Web Performance Engineering — analyzes Core Web Vitals using the PageSpeed Insights API (PSI v5) and applies the 80/20 principle: identify the 20% of changes that produce 80% of the performance gain. Produces a prioritized markdown report with quantified estimates and framework-specific code. Trigger: When auditing page speed, analyzing Core Web Vitals, or optimizing web performance for any URL.

The English summary is being prepared. Showing the original description.

Query and interpret security logs you are authorized to read. Build detections and investigations without leaking PII.

The English summary is being prepared. Showing the original description.

Provides expert knowledge for building Django 5+ projects with UV as the package manager, domain-driven app structure, ruff for linting, and pytest-django for testing.

The English summary is being prepared. Showing the original description.

Testing patterns for multi-tenant Django POS projects using pytest-django, RequestFactory, and mocks. No factories, no complex conftest. Trigger: When writing or reviewing tests in any apps/ directory.

The English summary is being prepared. Showing the original description.

Coordinate containment, eradication, and recovery for an authorized incident. Preserve evidence, communicate facts, and avoid destructive actions without approval.

The English summary is being prepared. Showing the original description.

Build and configure Laravel 10+ applications, including creating Eloquent models and relationships, implementing Sanctum authentication, configuring Horizon queues, designing RESTful APIs with API resources, and building reactive interfaces with Livewire. Use when creating Laravel models, setting up queue workers, implementing Sanctum auth flows, building Livewire components, optimising Eloquent queries, or writing Pest/PHPUnit tests for Laravel features.

The English summary is being prepared. Showing the original description.

Use when building PHP applications with modern PHP 8.3+ features, Laravel, or Symfony frameworks. Invokes strict typing, PHPStan level 9, async patterns with Swoole, and PSR standards. Creates controllers, configures middleware, generates migrations, writes PHPUnit/Pest tests, defines typed DTOs and value objects, sets up dependency injection, and scaffolds REST/GraphQL APIs. Use when working with Eloquent, Doctrine, Composer, Psalm, ReactPHP, or any PHP API development.

The English summary is being prepared. Showing the original description.

Map controls to SOC2, ISO 27001, PCI, or internal policy for the org you work for. Evidence and control design — not audit theater.

The English summary is being prepared. Showing the original description.

Audits token storage mechanisms to prevent XSS-based JWT theft.

The English summary is being prepared. Showing the original description.