테스트·보안 스킬

Run Playwright tests on BrowserStack to check behavior across browsers and devices. Configure cloud connections, compare results by browser, inspect session videos and logs, and set up a tunnel for testing local or restricted environments.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Checking browser compatibility with Playwright tests
• Configuring BrowserStack cloud test connections
• Investigating failures through session videos and logs

Set up Playwright browser tests, generate cases from specifications or URLs, and review coverage gaps. Diagnose tests that fail inconsistently, migrate Cypress or Selenium suites, and optionally connect TestRail and BrowserStack for results and browser testing.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Set up Playwright tests and CI
• Generate and review tests from user stories
• Diagnose tests that fail inconsistently

Set up Playwright, a browser testing tool, for an existing web project. Generate configuration, test folders, an example test, and applicable CI automation, then run the test and address setup failures.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Adding browser tests to an existing web project
• Configuring tests for the project's framework
• Running browser tests automatically in CI

Create Playwright tests from a user story, page URL, component path, or feature description. The skill follows existing project conventions, covers expected behavior and error cases, creates supporting files when needed, and runs the tests to check results.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Adding tests for login behavior
• Testing checkout and form submission flows
• Checking search filters and component interactions

Diagnose failing or intermittent Playwright tests by reproducing errors and examining execution traces. Classify the cause, apply a targeted fix, and run the test ten times to check stability, with recommendations to prevent recurrence.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Fixing a Playwright test that fails consistently
• Investigating tests that pass only sometimes
• Debugging failures limited to CI

Audit web applications for accessibility issues against WCAG 2.2 Level A and AA, the web accessibility standards. Get framework-specific code fixes, contrast checks, verification steps, and reports, with options for automated checks in development pipelines.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Audit a web application before release
• Fix contrast and keyboard navigation issues
• Prepare accessibility reports for stakeholders

Create signed records for consequential agent actions such as deployments, deletions, and payments. Decide which actions need evidence, record the agent, action, target, and policy, then verify the resulting certificate offline to detect later changes.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Creating signed records for production deployments
• Preserving evidence of deletions and payments
• Recording access grants for later review

Check Agent Skills for documentation structure and Python script behavior, then score quality and security posture. Get grades and improvement priorities, and use pass criteria in pre-commit checks or continuous integration, which runs checks automatically.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Checking a newly authored skill before release
• Auditing existing skills and prioritizing improvements
• Testing bundled Python scripts and sample outputs

Audit a codebase before production deployment across eight areas, including security, databases, dependencies, and AI usage. Receive findings with file locations, manual checklists, and a release verdict that blocks shipping when critical issues remain.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Check an application before its first production release
• Find security and database issues before deployment
• Review backup restoration and rollback readiness

Check AI agent skills before installation by inspecting code, instructions, dependencies, and file access without running the code. Receive a PASS, WARN, or FAIL verdict with findings ranked by severity and suggested fixes.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Checking an unfamiliar skill before installation
• Finding suspicious instructions in SKILL.md
• Reviewing scripts for credential theft or data leaks

Plan authorized security exercises that simulate attackers reaching important assets. Organize techniques into attack stages, rank effort and detection risk, identify shared points across attack paths, and use findings to assess detection and response coverage.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Plan a security exercise with written authorization
• Compare attack paths to critical assets
• Find shared attack steps to prioritize monitoring

Audit environment files and repository contents for possible credential leaks, then prioritize findings by severity. Plan credential replacement, improve configuration examples, and establish checks in development and delivery pipelines to reduce accidental exposure.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Checking configuration files before a commit
• Planning credential replacement after a leak
• Keeping environment examples safe for new contributors

Creates test starters for React and Next.js applications and analyzes coverage reports to find untested code. Supports unit, integration, and browser-based tests, simulated API responses, reusable test data, and test runner configuration.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Generating test starters for React components
• Finding untested code before a release
• Creating browser tests from Next.js routes

Identify security threats across system components and data flows, score their risks, and prioritize mitigations. Run a quick scan for exposed credentials and route requests beyond threat modeling to the appropriate specialist skills.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Reviewing threats in a new system design
• Prioritizing risks and assigning mitigation owners
• Scanning code for exposed credentials

Assess web applications, APIs, and infrastructure for security weaknesses through authorized testing. The skill guides code review, dependency and secret scanning, targeted vulnerability checks, and report creation with evidence, severity ratings, and remediation priorities.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Check a web application against the OWASP Top 10
• Test API authentication and access controls
• Scan dependencies and Git history for security risks

Scan API route definitions and generate test files for authentication, input validation, error responses, pagination, uploads, and rate limits. Supports Next.js App Router, Express, FastAPI, and Django REST, with Node and Python test outputs.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Creating test scaffolds for a new API
• Adding baseline tests to an existing API
• Checking API behavior against current route definitions

Review cloud permissions, public storage access, network rules, and infrastructure definitions for security gaps. The skill helps identify risky configurations, rank findings by severity, and suggest narrower permissions, with fuller coverage for AWS than Azure or GCP.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Reviewing cloud settings before deployment
• Finding excessive permissions and privilege escalation paths
• Checking public storage and exposed ports

Investigate hidden attacker activity using focused hypotheses, indicators of compromise such as malicious domains, and statistical checks on logs. Rank investigation priorities, generate indicator sweep targets, and flag unusual behavior for human review.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Prioritizing threat-hunting hypotheses
• Generating log sweep targets from compromise indicators
• Finding unusual activity against historical baselines

Assess detected security events by checking false positives, assigning incident types and severity levels, and identifying escalation routes. Guide initial response and forensic evidence collection, including records of who collected, held, and transferred each evidence item.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Classifying security alerts during initial response
• Checking false positives before escalation
• Planning evidence collection and custody records

Checks application code, dependencies, and security controls to identify vulnerabilities and plan fixes. Includes Python scanners, reports, incident response workflows, and guidance for adding security checks to CI/CD, the automated build and deployment process.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Checking code for exposed secrets and injection risks
• Prioritizing fixes for known dependency vulnerabilities
• Adding security checks to CI/CD pipelines

Audit dependency files across eight language ecosystems for built-in vulnerability patterns, license conflicts, and indirect dependency risks. Generate a prioritized upgrade plan with testing and rollback notes, and pair results with live audit tools for current vulnerability coverage.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Auditing third-party packages before a release
• Checking dependencies against built-in CVE patterns
• Reviewing license conflicts across dependency chains

Create unit test scaffolds, sample data, and mocks from code or specifications. Analyze coverage reports to prioritize missing tests, and guide test-driven development through failing tests, minimal implementation, and refactoring.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Create unit tests from existing code
• Prioritize gaps in test coverage
• Turn acceptance criteria into tests

Prepares medical device quality systems for ISO 13485 audits using six focused questions. Reviews design records, corrective actions, process validation, risk files, post-market monitoring, and management reviews, then summarizes readiness gaps and three priority actions.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Check readiness before an ISO 13485 internal audit
• Review design history files before a product launch
• Check evidence that corrective actions were effective

Assess security risks in AI systems by scanning prompts for known attack patterns and scoring data exposure, poisoning, and tool abuse risks. Map findings to MITRE ATLAS, an AI threat framework, and identify protective controls.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Scan application prompts for injection and jailbreak patterns
• Review malicious instructions in retrieved documents
• Assess training data exposure and poisoning risks