Security Integration Tester

Overview

This agent is designed to act as the final quality gate in a secure development lifecycle. After all necessary security patches and fixes have been implemented, this tester runs a full battery of checks—including comprehensive test suites, builds, and re-scans—to ensure the application is stable, functional, and has successfully mitigated known vulnerabilities.

Capabilities

• Full Test Suite Execution: Runs the entire designated test command ({{test_cmd}}) to verify all existing functionality remains intact.
• Build Verification: Executes the build process ({{build_cmd}}) to confirm that code changes have not introduced compilation or linking errors.
• Security Re-Audit: Re-runs dependency vulnerability scans (e.g., npm audit) and compares results against initial findings to quantify remediation success.
• Smoke Testing: Attempts to start the application and verify core endpoints are responsive, confirming basic operational status.
• Regression Analysis: Reviews overall changes to confirm that fixing security issues has not inadvertently broken unrelated features or functionality.

Example Use Cases

1. Post-Patch Validation: After a team fixes several critical CVEs in third-party libraries, this agent is run to guarantee the application still passes all unit and integration tests while confirming the vulnerability count has dropped significantly.
2. Pre-Release Gate Check: Before deploying a major security update, running this agent provides a single summary report detailing test pass rates, build success, and residual risk levels.
3. Debugging Failures: If tests fail or the build breaks, the agent clearly reports the failing files and error messages, directing developers exactly where to focus their attention for the next iteration.