测试与安全技能

Actively enumerate in-scope hosts and services, then produce normalized network mapping artifacts.

中文简介正在准备中。当前显示原文说明。

Systematically test authorized targets for SQL, XSS, SSTI, XXE, command, and request-smuggling injection classes.

中文简介正在准备中。当前显示原文说明。

Plan and orchestrate authorized Nmap host discovery, port and service enumeration, NSE profiling, and reporting artifacts for in-scope targets.

中文简介正在准备中。当前显示原文说明。

Assess Active Directory identity attack paths including roasting, relay, and delegation abuse.

中文简介正在准备中。当前显示原文说明。

Set up authorized C2 simulation workflows and measure defensive detection outcomes.

中文简介正在准备中。当前显示原文说明。

Assess Linux and Windows privilege escalation vectors from existing authorized footholds.

中文简介正在准备中。当前显示原文说明。

Assess lateral movement and pivot paths across authorized internal trust boundaries.

中文简介正在准备中。当前显示原文说明。

Assess mobile applications with static and dynamic analysis aligned to OWASP MASTG and MASVS.

中文简介正在准备中。当前显示原文说明。

Perform passive reconnaissance and leak intelligence collection with no direct contact to target systems.

中文简介正在准备中。当前显示原文说明。

Design phishing and social engineering simulations with explicit authorization and measurable outcomes.

中文简介正在准备中。当前显示原文说明。

Map application security findings to OWASP Top 10 categories and generate remediation checklists. Use for normalized AppSec review outputs and category-level prioritization.

中文简介正在准备中。当前显示原文说明。

Run controlled exploitation against confirmed vulnerabilities while enforcing scope and authorization gates.

中文简介正在准备中。当前显示原文说明。

Correlate scanner results with CVE and exploit intelligence and prioritize by CVSS and exploitability.

中文简介正在准备中。当前显示原文说明。

Test authentication and session management controls for bypass and account takeover scenarios.

中文简介正在准备中。当前显示原文说明。

Coordinate autonomous pentest skills with dependency enforcement, deconfliction, and emergency stop controls.

中文简介正在准备中。当前显示原文说明。

GodoMaster — Godot 4.x game development intelligence: GDScript, nodes/scenes, 2D/3D rendering, physics, animation, UI, audio, input, shaders, networking, performance, export, file I/O, testing, localization, AI behavior, asset pipeline, and architecture tooling. Complete workflow for indie and professional game development based on official Godot documentation.

中文简介正在准备中。当前显示原文说明。

Show a summary of the current project state including git, tests, and build status

中文简介正在准备中。当前显示原文说明。

Semantic audit of the IDD instruction corpus for leaked session context, cross-file contradictions, fresh-memory completability gaps, automation blockers, and restatement-discipline drift. Use on request to audit .github/instructions, the issue-authoring skill bundle, and the installed agent entry files (CLAUDE.md, AGENTS.md, GEMINI.md, .github/copilot-instructions.md). Read-only — never edits files or mutates issues.

中文简介正在准备中。当前显示原文说明。

Create or update project test-case assets and test reports. Use when Codex is asked to generate test cases in Excel, produce a Word/DOCX test report, summarize automated test execution, turn repository tests into a formal testing artifact, or沉淀/复用 a project testing documentation workflow.

中文简介正在准备中。当前显示原文说明。

Audit and optimize a skill system with evidence. Use for skill architecture, token or context waste, role and prompt boundaries, routing hits or misfires, plugin packaging, registry/docs/source drift, duplicate workflows, or deciding whether a reusable change belongs in a skill. Runs deterministic checks first and applies only authorized, minimal fixes.

中文简介正在准备中。当前显示原文说明。

Use for deterministic terminal or CI browser automation, repeatable regressions, traces, snapshots, screenshots, and unattended playwright-cli batches. Route interactive or signed-in Chrome work through browser-automation-router first.

中文简介正在准备中。当前显示原文说明。

Pressure-test startup ideas against real user pain, current behavior, competitors, first-customer access, MVP scope, founder-market fit, and a two-week launch test. Produces a direct strong, weak, or pivot verdict.

中文简介正在准备中。当前显示原文说明。

Run user-authorized black-box web security tests and evidence-based reports. Use for 黑盒安全测试、渗透测试、数据泄露、未授权访问、公开 JS/API、登录爆破防护、CORS 或安全响应头检查。

中文简介正在准备中。当前显示原文说明。

GStack review method for pre-landing code, diff, PR, or implementation review focused on bugs, regressions, missing tests, and release risks.

中文简介正在准备中。当前显示原文说明。