Testing & Security skills

Assess web applications against OWASP WSTG and OWASP Top 10 with reproducible evidence capture.

The English summary is being prepared. Showing the original description.

Evaluate authorized wireless networks for handshake, PMKID, rogue AP, and enterprise auth weaknesses.

The English summary is being prepared. Showing the original description.

Perform passive reconnaissance and leak intelligence collection with no direct contact to target systems.

The English summary is being prepared. Showing the original description.

Assess Linux and Windows privilege escalation vectors from existing authorized footholds.

The English summary is being prepared. Showing the original description.

Set up authorized C2 simulation workflows and measure defensive detection outcomes.

The English summary is being prepared. Showing the original description.

Assess Active Directory identity attack paths including roasting, relay, and delegation abuse.

The English summary is being prepared. Showing the original description.

Plan and orchestrate authorized Nmap host discovery, port and service enumeration, NSE profiling, and reporting artifacts for in-scope targets.

The English summary is being prepared. Showing the original description.

Test authentication and session management controls for bypass and account takeover scenarios.

The English summary is being prepared. Showing the original description.

Actively enumerate in-scope hosts and services, then produce normalized network mapping artifacts.

The English summary is being prepared. Showing the original description.

Aggregate SAST, SCA, DAST, secrets, API, frontend, and backend security checks into one report.

The English summary is being prepared. Showing the original description.

GodoMaster — Godot 4.x game development intelligence: GDScript, nodes/scenes, 2D/3D rendering, physics, animation, UI, audio, input, shaders, networking, performance, export, file I/O, testing, localization, AI behavior, asset pipeline, and architecture tooling. Complete workflow for indie and professional game development based on official Godot documentation.

The English summary is being prepared. Showing the original description.

Show a summary of the current project state including git, tests, and build status

The English summary is being prepared. Showing the original description.

Semantic audit of the IDD instruction corpus for leaked session context, cross-file contradictions, fresh-memory completability gaps, automation blockers, and restatement-discipline drift. Use on request to audit .github/instructions, the issue-authoring skill bundle, and the installed agent entry files (CLAUDE.md, AGENTS.md, GEMINI.md, .github/copilot-instructions.md). Read-only — never edits files or mutates issues.

The English summary is being prepared. Showing the original description.

Use for deterministic terminal or CI browser automation, repeatable regressions, traces, snapshots, screenshots, and unattended playwright-cli batches. Route interactive or signed-in Chrome work through browser-automation-router first.

The English summary is being prepared. Showing the original description.

Create or update project test-case assets and test reports. Use when Codex is asked to generate test cases in Excel, produce a Word/DOCX test report, summarize automated test execution, turn repository tests into a formal testing artifact, or沉淀/复用 a project testing documentation workflow.

The English summary is being prepared. Showing the original description.

Audit and optimize a skill system with evidence. Use for skill architecture, token or context waste, role and prompt boundaries, routing hits or misfires, plugin packaging, registry/docs/source drift, duplicate workflows, or deciding whether a reusable change belongs in a skill. Runs deterministic checks first and applies only authorized, minimal fixes.

The English summary is being prepared. Showing the original description.

Pressure-test startup ideas against real user pain, current behavior, competitors, first-customer access, MVP scope, founder-market fit, and a two-week launch test. Produces a direct strong, weak, or pivot verdict.

The English summary is being prepared. Showing the original description.

GStack engineering-manager plan review for architecture, data flow, APIs, migrations, edge cases, tests, performance, release risk, and implementation boundaries.

The English summary is being prepared. Showing the original description.

GStack review method for pre-landing code, diff, PR, or implementation review focused on bugs, regressions, missing tests, and release risks.

The English summary is being prepared. Showing the original description.

Run user-authorized black-box web security tests and evidence-based reports. Use for 黑盒安全测试、渗透测试、数据泄露、未授权访问、公开 JS/API、登录爆破防护、CORS 或安全响应头检查。

The English summary is being prepared. Showing the original description.

GStack QA method for web/UI behavior verification and narrow fix loops when the user explicitly allows QA to repair issues.

The English summary is being prepared. Showing the original description.

Codex adapter for Garry Tan's full gstack methodology across CEO/product pressure, CTO architecture, design, engineering, QA, security, shipping, documentation, and retrospectives. Use when the 总控/CEO or 架构/CTO role needs gstack method routing, implementation-plan hardening, or the user says gstack should help a role.

The English summary is being prepared. Showing the original description.

GStack CSO method for broad infrastructure-first security posture review, threat areas, severity calibration, and safe remediation scope.

The English summary is being prepared. Showing the original description.

GStack developer-experience plan review for setup, local commands, docs, test loops, onboarding friction, and maintainability before implementation.

The English summary is being prepared. Showing the original description.