zebbern

Use SQLMap to test SQL injection, where application inputs can alter database queries. The skill guides automated detection, database and table discovery, selected data extraction, and documentation of the vulnerability type and severity.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Testing suspected SQL injection in an authorized web application
• Inspecting database, table, and column structures
• Testing POST requests captured with Burp Suite

Write, review, and optimize Three.js scenes using guidance on memory cleanup, rendering, models, textures, and lighting. Apply examples to reduce unnecessary work, investigate memory leaks, and adjust 3D experiences for mobile devices.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Reviewing rendering performance in Three.js scenes
• Fixing memory leaks when switching 3D views
• Optimizing models and textures for mobile devices

Generate OpenAPI 3.0.3 specifications, a standard format for describing APIs, from route definitions in supported web frameworks. Extract paths, HTTP methods, parameters, and available model information into JSON or YAML for Swagger UI or Redoc.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Generating an API specification from source code
• Listing existing API endpoints
• Preparing specifications for Swagger UI or Redoc

Helps configure Playwright tests in automated CI/CD pipelines across major providers. Covers splitting tests across runners, Docker execution, shared login setup, code coverage, and saving reports and debugging artifacts to investigate failures.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Running Playwright tests in GitHub Actions or GitLab CI
• Splitting tests across multiple runners
• Saving traces and reports after test failures

Polishes academic English paragraph by paragraph while preserving the author's meaning and technical content. Reviews grammar, word choice, voice, logical flow, and sentence structure, providing specific revision reasons alongside complete polished paragraphs.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Polishing English before journal submission
• Checking articles and tense in academic writing
• Improving flow across Introduction paragraphs

Assess web applications for SQL injection, where user input changes database queries. Guides authorized testing through response comparisons, timing checks, impact demonstrations, and evidence collection, leading to vulnerability reports and remediation recommendations.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Checking forms and URL parameters for SQL injection
• Investigating flaws through response changes or delays
• Validating authentication bypass risks within an agreed scope

Assess web applications for XSS, where injected scripts run in a browser, and HTML injection flaws. Classify stored, reflected, and DOM-based issues, demonstrate their impact in controlled tests, and prepare findings with remediation recommendations.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Testing comment and profile fields for stored XSS
• Checking how search queries appear in responses
• Tracing browser-side handling of URL input

Analyze Git history to find frequently changed files, understand contributor involvement, and detect exposed credentials. Use the results to prioritize code reviews, choose reviewers, and identify areas that may need restructuring.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Checking commit history for exposed credentials before deployment
• Prioritizing reviews of frequently changed files
• Choosing reviewers based on contributor history

Automate browser tasks with playwright-cli, including navigation, form filling, and data extraction. Test web applications, capture screenshots, reuse login sessions, and generate test code through command-line browser controls.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Automating form entry and page navigation
• Checking web application behavior
• Saving screenshots, videos, and PDFs

Build TypeScript applications with consistent types across frontend and backend. Get help designing reusable types, checking values with type guards, configuring the compiler, and improving builds, with code and explanations of design choices.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Designing reusable types for complex application data
• Keeping frontend and API types consistent with tRPC
• Reviewing tsconfig and build performance

Review terms of service and privacy policies from a consumer's perspective. Identify risks involving subscriptions, data use, liability, and content rights, then produce a structured report with supporting passages, severity assessments, and practical actions.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Checking subscription renewal and cancellation terms
• Reviewing data collection and sharing permissions
• Examining platform rights over posted content

Use Wireshark to capture and filter network packets, the small units of transmitted data. Examine saved traffic, reconstruct conversations, and review statistics to investigate connection problems, performance issues, or suspicious activity and document findings.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Investigating slow or failing network connections
• Filtering saved captures by IP address or protocol
• Examining suspicious DNS queries and traffic patterns

Build features or fix bugs through test-driven development: write one failing test, add enough code to pass, then refactor. Focuses on observable behavior through public interfaces, helping tests remain useful when internal code changes.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Building a feature one tested behavior at a time
• Reproducing a bug with a failing test before fixing it
• Designing integration tests around public interfaces

Assess WordPress security using WPScan and related tools. Identify versions, themes, plugins, and exposed user information, then examine known vulnerabilities, configuration problems, and weak passwords to produce assessment findings and evidence.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Identifying WordPress versions, themes, and plugins
• Checking known vulnerabilities and configuration problems
• Assessing exposed user information and weak passwords

Organize Playwright tests with guidance on Page Object Model, a pattern that groups code by page. Learn how to structure page objects and decide when fixtures or helpers offer a simpler approach.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Organizing Playwright test code
• Choosing whether to introduce page objects
• Comparing POM, fixtures, and helpers

Turn a business scenario into a compliance checklist covering GDPR and Chinese privacy, data, and advertising regulations. Organize legal references, risk levels, current status, and recommended actions into a prioritized remediation plan.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Preparing a compliance checklist before launching a feature
• Reviewing user profiling and personalized recommendations
• Organizing cross-border data transfer checks

Use Shodan to investigate internet-exposed devices and services on authorized targets. Guidance covers web searches, command-line tools, and APIs to compile asset inventories, review known vulnerability information, monitor networks, and export findings.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Inventorying an authorized organization's exposed services
• Finding services associated with known vulnerabilities
• Reviewing exposed IoT devices and management interfaces

Guides security scanning across networks, web applications, wireless systems, and cloud environments. Helps select and configure tools, check findings for false positives, prioritize risks, and prepare reports with remediation recommendations.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Discovering hosts, open ports, and services
• Assessing web application vulnerabilities
• Reviewing cloud security settings

Turn plain-language questions into SQL for SQLite and PostgreSQL using database structure as context. Review queries against 13 optimization rules and interpret execution plans, which show how the database retrieves data, to investigate slow queries.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Turning plain-language questions into SQL
• Investigating slow queries
• Checking index usage

Turns JSON event data into interactive HTML timelines for milestones, histories, or resumes. Choose vertical, horizontal, or dual-side layouts, customize colors, and expand event details in a mobile-friendly page that opens directly in a browser.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Displaying project milestones
• Presenting product release histories
• Creating a company history timeline

Assess SSH services by discovering servers, reviewing encryption settings, testing passwords and keys, and investigating known vulnerabilities. Includes guidance on SSH tunnels and port forwarding, with reports covering configuration, authentication weaknesses, and forwarding setups.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Discovering SSH services and reviewing encryption settings
• Assessing password and private key authentication
• Checking known SSH vulnerabilities and misconfigurations

Assess mail server security by checking unauthorized relaying, exposed user accounts, weak authentication, encryption, and sender verification records. This skill guides SMTP testing and helps organize findings into an assessment report with practical configuration improvements.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Check whether a mail server permits unauthorized relaying
• Assess exposure of user accounts and weak authentication
• Review TLS and SPF, DKIM, and DMARC settings

Investigate Windows weaknesses that could let a standard user gain Administrator or SYSTEM access. Guides authorized penetration tests through system inspection, credential checks, escalation validation, and reports with remediation recommendations.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Investigating Windows privilege escalation paths
• Checking service permissions and stored credentials
• Assessing token privileges and missing patches

Review web application code against OWASP Top 10 (2021), a list of common security risks. Receive findings with file locations, severity ratings, concrete fix code, and a prioritized list of remediation tasks.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Reviewing a project's OWASP Top 10 security coverage
• Checking code for SQL injection and XSS
• Inspecting authentication and access controls