Test design, vulnerability assessment, and quality assurance (13.1K skills)
Azure Key Vault Keys SDK for .NET. Client library for managing cryptographic keys in Azure Key Vault and Managed HSM. Use for key creation, rotation, encryption, decryption, signing, and verification.
The English summary is being prepared. Showing the original description.
Azure Key Vault Keys Java SDK for cryptographic key management. Use when creating, managing, or using RSA/EC keys, performing encrypt/decrypt/sign/verify operations, or working with HSM-backed keys.
The English summary is being prepared. Showing the original description.
Azure Key Vault Secrets Java SDK for secret management. Use when storing, retrieving, or managing passwords, API keys, connection strings, or other sensitive configuration data.
The English summary is being prepared. Showing the original description.
Bash scripting workflow for creating production-ready shell scripts with defensive patterns, error handling, and testing.
The English summary is being prepared. Showing the original description.
Expert in secure backend coding practices specializing in input validation, authentication, and API security. Use PROACTIVELY for backend security implementations or security code reviews.
The English summary is being prepared. Showing the original description.
Run Playwright tests at scale with cloud-hosted browsers and integrated Azure portal reporting.
The English summary is being prepared. Showing the original description.
Audit and rewrite content to remove 21 categories of AI writing patterns with a 43-entry replacement table
The English summary is being prepared. Showing the original description.
Build comprehensive attack trees to visualize threat paths. Use when mapping attack scenarios, identifying defense gaps, or communicating security risks to stakeholders.
The English summary is being prepared. Showing the original description.
Expert security auditor for AI Skills and Bundles. Performs non-intrusive static analysis to identify malicious patterns, data leaks, system stability risks, and obfuscated payloads across Windows, macOS, Linux/Unix, and Mobile (Android/iOS).
The English summary is being prepared. Showing the original description.
AI-powered E2E web testing — eyes and hands for AI coding tools. Declarative YAML scenarios, Playwright execution, visual matching (OpenCV + OCR), platform auto-detection (Flutter/React/Vue), learning DB. Install: npx skills add ksgisang/awt-skill --skill awt -g
The English summary is being prepared. Showing the original description.
Provide comprehensive techniques for penetration testing AWS cloud environments. Covers IAM enumeration, privilege escalation, SSRF to metadata endpoint, S3 bucket exploitation, Lambda code extraction, and persistence techniques for red team operations.
The English summary is being prepared. Showing the original description.
Enables ultra-granular, line-by-line code analysis to build deep architectural context before vulnerability or bug finding.
The English summary is being prepared. Showing the original description.
You are an API mocking expert specializing in realistic mock services for development, testing, and demos. Design mocks that simulate real API behavior and enable parallel development.
The English summary is being prepared. Showing the original description.
AUTHORIZED USE ONLY: This skill contains dual-use security techniques. Before proceeding with any bypass or analysis: > 1.
The English summary is being prepared. Showing the original description.
Implement secure API design patterns including authentication, authorization, input validation, rate limiting, and protection against common API vulnerabilities
The English summary is being prepared. Showing the original description.
API security testing workflow for REST and GraphQL APIs covering authentication, authorization, rate limiting, input validation, and security best practices.
The English summary is being prepared. Showing the original description.
Automated end-to-end UI testing and verification on an Android Emulator using ADB.
The English summary is being prepared. Showing the original description.
You are an accessibility expert specializing in WCAG compliance, inclusive design, and assistive technology compatibility. Conduct audits, identify barriers, and provide remediation guidance.
The English summary is being prepared. Showing the original description.
6 production-ready AI engineering workflows: prompt evaluation (8-dimension scoring), context budget planning, RAG pipeline design, agent security audit (65-point checklist), eval harness building, and product sense coaching.
The English summary is being prepared. Showing the original description.
Audits GitHub Actions workflows for security vulnerabilities in AI agent integrations including Claude Code Action, Gemini CLI, OpenAI Codex, and GitHub AI Inference. Detects attack vectors where attacker-controlled input reaches. AI agents running in CI/CD pipelines.
The English summary is being prepared. Showing the original description.
Structured guide for setting up A/B tests with mandatory gates for hypothesis, metrics, and execution readiness.
The English summary is being prepared. Showing the original description.
Build production Apache Airflow DAGs with best practices for operators, sensors, testing, and deployment. Use when creating data pipelines, orchestrating workflows, or scheduling batch jobs.
The English summary is being prepared. Showing the original description.
Provide comprehensive techniques for attacking Microsoft Active Directory environments. Covers reconnaissance, credential harvesting, Kerberos attacks, lateral movement, privilege escalation, and domain dominance for red team operations and penetration testing.
The English summary is being prepared. Showing the original description.
Security audit, hardening, threat modeling (STRIDE/PASTA), Red/Blue Team, OWASP checks, code review, incident response, and infrastructure security for any project.
The English summary is being prepared. Showing the original description.