Test design, vulnerability assessment, and quality assurance (13.9K skills)
Bash scripting workflow for creating production-ready shell scripts with defensive patterns, error handling, and testing.
The English summary is being prepared. Showing the original description.
Expert in secure backend coding practices specializing in input validation, authentication, and API security. Use PROACTIVELY for backend security implementations or security code reviews.
The English summary is being prepared. Showing the original description.
Direct browser control via CDP. Use when the user wants to automate, scrape, test, or interact with web pages. Connects to the user's already-running Chrome.
The English summary is being prepared. Showing the original description.
Run Playwright tests at scale with cloud-hosted browsers and integrated Azure portal reporting.
The English summary is being prepared. Showing the original description.
Azure Resource Manager SDK for Microsoft Playwright Testing in .NET.
The English summary is being prepared. Showing the original description.
Azure Key Vault Keys SDK for .NET. Client library for managing cryptographic keys in Azure Key Vault and Managed HSM. Use for key creation, rotation, encryption, decryption, signing, and verification.
The English summary is being prepared. Showing the original description.
Azure Key Vault Keys Java SDK for cryptographic key management. Use when creating, managing, or using RSA/EC keys, performing encrypt/decrypt/sign/verify operations, or working with HSM-backed keys.
The English summary is being prepared. Showing the original description.
Azure Key Vault Secrets Java SDK for secret management. Use when storing, retrieving, or managing passwords, API keys, connection strings, or other sensitive configuration data.
The English summary is being prepared. Showing the original description.
Provide comprehensive techniques for penetration testing AWS cloud environments. Covers IAM enumeration, privilege escalation, SSRF to metadata endpoint, S3 bucket exploitation, Lambda code extraction, and persistence techniques for red team operations.
The English summary is being prepared. Showing the original description.
Enables ultra-granular, line-by-line code analysis to build deep architectural context before vulnerability or bug finding.
The English summary is being prepared. Showing the original description.
Expert security auditor for AI Skills and Bundles. Performs non-intrusive static analysis to identify malicious patterns, data leaks, system stability risks, and obfuscated payloads across Windows, macOS, Linux/Unix, and Mobile (Android/iOS).
The English summary is being prepared. Showing the original description.
Audit and rewrite content to remove 21 categories of AI writing patterns with a 43-entry replacement table
The English summary is being prepared. Showing the original description.
AI-powered E2E web testing — eyes and hands for AI coding tools. Declarative YAML scenarios, Playwright execution, visual matching (OpenCV + OCR), platform auto-detection (Flutter/React/Vue), learning DB. Install: npx skills add ksgisang/awt-skill --skill awt -g
The English summary is being prepared. Showing the original description.
Run technical quality checks across accessibility, performance, theming, responsive design, and anti-patterns. Generates a scored report with P0-P3 severity ratings and actionable plan. Use when the user wants an accessibility check, performance audit, or technical quality review.
The English summary is being prepared. Showing the original description.
Build comprehensive attack trees to visualize threat paths. Use when mapping attack scenarios, identifying defense gaps, or communicating security risks to stakeholders.
The English summary is being prepared. Showing the original description.
First-principles assumption auditor. Classifies each hidden assumption (fact / convention / belief / interest-driven), ranks by fragility × impact, and rebuilds conclusions from verified premises. Bilingual: auto-detects Chinese or English.
The English summary is being prepared. Showing the original description.
AUTHORIZED USE ONLY: This skill contains dual-use security techniques. Before proceeding with any bypass or analysis: > 1.
The English summary is being prepared. Showing the original description.
Implement secure API design patterns including authentication, authorization, input validation, rate limiting, and protection against common API vulnerabilities
The English summary is being prepared. Showing the original description.
Automated end-to-end UI testing and verification on an Android Emulator using ADB.
The English summary is being prepared. Showing the original description.
API security testing workflow for REST and GraphQL APIs covering authentication, authorization, rate limiting, input validation, and security best practices.
The English summary is being prepared. Showing the original description.
You are an API mocking expert specializing in realistic mock services for development, testing, and demos. Design mocks that simulate real API behavior and enable parallel development.
The English summary is being prepared. Showing the original description.
Build production Apache Airflow DAGs with best practices for operators, sensors, testing, and deployment. Use when creating data pipelines, orchestrating workflows, or scheduling batch jobs.
The English summary is being prepared. Showing the original description.
Structured guide for setting up A/B tests with mandatory gates for hypothesis, metrics, and execution readiness.
The English summary is being prepared. Showing the original description.
Testing and benchmarking LLM agents including behavioral testing, capability assessment, reliability metrics, and production monitoring—where even top agents achieve less than 50% on real-world benchmarks
The English summary is being prepared. Showing the original description.