测试与安全技能

Investigate Linux intrusions using auditd records. Configure audit rules, search events with ausearch, summarize activity with aureport, reconstruct a timeline of suspicious actions, and forward logs to a central security monitoring system.

中文简介正在准备中。当前显示英语简介。

• Investigating unauthorized access or privilege escalation
• Checking changes to critical files and SSH keys
• Reconstructing an incident timeline

Observe malware in an isolated Cuckoo Sandbox environment and review its processes, network traffic, and system changes. Use the findings to trace infection stages, identify persistence mechanisms, and extract indicators of compromise for behavioral reports.

中文简介正在准备中。当前显示英语简介。

• Investigating suspicious files after static analysis
• Tracing multi-stage infections and persistence mechanisms
• Extracting indicators of compromise from observed behavior

Inspect suspicious Android APK files without running them. Analyze permissions, app components, suspicious code patterns, and network indicators, then produce a JSON risk report to support malware triage and detection rule development.

中文简介正在准备中。当前显示英语简介。

• Triage suspicious APK files without running them
• Inspect dangerous permission combinations and suspicious API calls
• Extract network indicators for malware detection rules

Use Wireshark and tshark to capture and inspect network packets, the small units of network communication. Investigate suspicious connections and protocol problems, extract transferred files, and export evidence and summaries for incident investigations.

中文简介正在准备中。当前显示英语简介。

• Investigating suspected intrusions or data leaks
• Diagnosing retransmissions and DNS failures
• Checking traffic against firewall and IDS rules

Investigate Linux kernel rootkits, malware that hides inside the operating system's core. Analyze memory dumps with Volatility3, compare system views, and run live scans to identify hidden modules, altered calls, and suspicious inconsistencies.

中文简介正在准备中。当前显示英语简介。

• Investigate suspected Linux rootkit infections
• Find hidden kernel modules in memory dumps
• Compare module lists for signs of concealment

Map threat groups’ documented attack techniques in MITRE ATT&CK Navigator. Creates visual layers and heatmaps, compares groups, and highlights techniques missing from existing detection coverage to support security reporting and decisions about detection priorities.

中文简介正在准备中。当前显示英语简介。

• Visualizing a threat group's attack techniques
• Comparing techniques shared by multiple threat groups
• Finding gaps in existing detection coverage

Investigate compromised Docker containers by preserving evidence and examining image layers, logs, file changes, and host settings. Summarize suspicious activity, security configuration issues, and vulnerability findings to support incident response.

中文简介正在准备中。当前显示英语简介。

• Investigating a compromised application container
• Examining a suspicious image from a registry
• Checking evidence of a container escape attempt

Investigate malware hidden in boot records, UEFI firmware, or the operating system’s core. The skill guides evidence collection, boot integrity checks, firmware and memory analysis, and reporting of persistence mechanisms and remediation steps when compromise survives an OS reinstall.

中文简介正在准备中。当前显示英语简介。

• Investigating infections that survive an OS reinstall
• Examining unexplained Secure Boot integrity violations
• Finding hidden processes and suspicious kernel drivers

Analyze disk images with Autopsy and The Sleuth Kit to recover deleted files, search content, and examine recorded activity. Build investigation timelines and visual reports that help stakeholders understand evidence from one or multiple disk images.

中文简介正在准备中。当前显示英语简介。

• Recovering deleted files from a disk image
• Searching evidence for confidential files and keywords
• Reconstructing activity around a malware infection

Audit whether an AI agent follows its intended purpose, business rules, and permission boundaries. The skill guides setup discovery, test configuration, execution against an agent endpoint or substitute model, and interpretation of scores from selected judging models.

中文简介正在准备中。当前显示英语简介。

• Auditing an agent's compliance with business rules
• Testing permission boundaries and dangerous tools
• Evaluating an agent through its HTTP endpoint

Write and run tests for features and fixes, starting with likely failures and boundary cases. Use behavior-focused checks, suitable test environments, and coverage results to assess whether changes are ready.

中文简介正在准备中。当前显示英语简介。

• Writing tests for a new feature
• Adding regression tests for a bug fix
• Updating existing tests after behavior changes

Test runnable software through normal and hostile end-to-end scenarios, checking complete behavior across a workflow. Investigate failures, apply fixes, rerun checks, and produce an evidence-backed report covering results, cleanup, and remaining risks.

中文简介正在准备中。当前显示英语简介。

• Check behavior with malformed input
• Verify cancellation and resumption
• Investigate flaky tests

Review websites for security, browser compatibility, and code quality. Identify issues in HTTPS settings, third-party libraries, HTML, and error handling, then apply concrete improvements using checklists and implementation examples.

中文简介正在准备中。当前显示英语简介。

• Reviewing website security settings
• Checking third-party libraries for vulnerabilities
• Replacing deprecated browser APIs

Audit websites for accessibility barriers and improve image descriptions, color contrast, forms, keyboard navigation, and screen reader support. Provides code examples and automated and manual testing guidance for work toward WCAG 2.1 AA or AAA accessibility standards.

中文简介正在准备中。当前显示英语简介。

• Auditing a website for accessibility issues
• Fixing form labels and error announcements
• Checking keyboard navigation and dialog focus

Configure safety checks for LLM applications with NeMo Guardrails. Covers attempts to bypass safety rules, input and output validation, masking personal information, and checking factual claims through programmable rules and integrations.

中文简介正在准备中。当前显示英语简介。

• Detecting instructions that try to bypass safety rules
• Masking personal information before processing
• Adding factual checks to generated answers

Turn feature requirements into test plans, step-by-step manual tests, regression suites for checking existing features, and reproducible bug reports. The skill also supports comparing implemented interfaces with Figma designs and documenting visual differences.

中文简介正在准备中。当前显示英语简介。

• Plan tests for a new feature
• Write manual checkout test cases
• Organize regression checks before a release

Build safety checks for LLM prompts and responses using Meta's LlamaGuard moderation model. Classify potentially harmful content, block flagged messages, serve checks through an API, and integrate them with NeMo Guardrails.

中文简介正在准备中。当前显示英语简介。

• Checking prompts before sending them to an LLM
• Filtering responses before displaying them
• Building a moderation API

Review security across web apps, APIs, mobile apps, Kubernetes, and AI agents using six OWASP references. Identify risky authentication, access controls, configurations, and prompt handling, then use examples and checklists to plan fixes.

中文简介正在准备中。当前显示英语简介。

• Review login flows and access controls
• Check API authorization and data exposure
• Review mobile app storage and communications

Design tests that assess an AI agent's capabilities and reliability. Covers repeated runs to measure variation, checks for required behavior, and adversarial testing to expose failures that ordinary successful examples may miss.

中文简介正在准备中。当前显示英语简介。

• Measuring variation across repeated runs of the same test
• Checking whether an agent follows required behavior
• Testing responses to unexpected or adversarial inputs

Compare Storybook screenshots before and after a code change in both dark and light themes. Check rendering noise, annotate meaningful differences, and export a shareable visual report that helps reviewers see what changed and what stayed identical.

中文简介正在准备中。当前显示英语简介。

• Compare screens before and after a code change
• Check visual regressions in dark and light themes
• Share annotated screenshot comparisons in a PR

Build Storybook page stories for SigNoz by mapping API requests, display states, and URL parameters. Use msw mock responses, which simulate API replies, and controls to inspect loading, errors, permissions, and other page states.

中文简介正在准备中。当前显示英语简介。

• Creating Storybook stories for SigNoz pages
• Switching between loading, empty, and error states
• Checking how permissions affect buttons and controls

Check a user prompt through an existing Google Model Armor template. Supply the text directly, submit a JSON request, or pass text through standard input, which lets the command read piped content.

中文简介正在准备中。当前显示英语简介。

• Checking an AI prompt against an existing template
• Passing prompt text from another command
• Submitting a prompt check as a JSON request

Create a Google Model Armor template for checking AI prompts and responses. Specify a Google Cloud project, location, and template ID, then use a preset or provide custom settings in JSON.

中文简介正在准备中。当前显示英语简介。

• Creating a template with the jailbreak preset
• Defining template settings in JSON
• Preparing a template for prompt and response checks

Use Google Model Armor to filter user prompts and model responses for safety. The skill covers creating templates that define checks and discovering command parameters before making API calls through the gws command-line tool.

中文简介正在准备中。当前显示英语简介。

• Check user prompts through a Model Armor template
• Check model responses through a Model Armor template
• Create a template for content safety checks