测试与安全技能

Bash scripting workflow for creating production-ready shell scripts with defensive patterns, error handling, and testing.

中文简介正在准备中。当前显示原文说明。

Master Bash Automated Testing System (Bats) for comprehensive shell script testing. Use when writing tests for shell scripts, CI/CD pipelines, or requiring test-driven development of shell utilities.

中文简介正在准备中。当前显示原文说明。

Direct browser control via CDP. Use when the user wants to automate, scrape, test, or interact with web pages. Connects to the user's already-running Chrome.

中文简介正在准备中。当前显示原文说明。

Identify and exploit authentication and session management vulnerabilities in web applications. Broken authentication consistently ranks in the OWASP Top 10 and can lead to account takeover, identity theft, and unauthorized access to sensitive systems.

中文简介正在准备中。当前显示原文说明。

Azure Key Vault Keys SDK for .NET. Client library for managing cryptographic keys in Azure Key Vault and Managed HSM. Use for key creation, rotation, encryption, decryption, signing, and verification.

中文简介正在准备中。当前显示原文说明。

Run Playwright tests at scale with cloud-hosted browsers and integrated Azure portal reporting.

中文简介正在准备中。当前显示原文说明。

Azure Resource Manager SDK for Microsoft Playwright Testing in .NET.

中文简介正在准备中。当前显示原文说明。

Azure Key Vault Secrets Java SDK for secret management. Use when storing, retrieving, or managing passwords, API keys, connection strings, or other sensitive configuration data.

中文简介正在准备中。当前显示原文说明。

Azure Key Vault Keys Java SDK for cryptographic key management. Use when creating, managing, or using RSA/EC keys, performing encrypt/decrypt/sign/verify operations, or working with HSM-backed keys.

中文简介正在准备中。当前显示原文说明。

Audit and rewrite content to remove 21 categories of AI writing patterns with a 43-entry replacement table

中文简介正在准备中。当前显示原文说明。

AI-powered E2E web testing — eyes and hands for AI coding tools. Declarative YAML scenarios, Playwright execution, visual matching (OpenCV + OCR), platform auto-detection (Flutter/React/Vue), learning DB. Install: npx skills add ksgisang/awt-skill --skill awt -g

中文简介正在准备中。当前显示原文说明。

First-principles assumption auditor. Classifies each hidden assumption (fact / convention / belief / interest-driven), ranks by fragility × impact, and rebuilds conclusions from verified premises. Bilingual: auto-detects Chinese or English.

中文简介正在准备中。当前显示原文说明。

Provide comprehensive techniques for penetration testing AWS cloud environments. Covers IAM enumeration, privilege escalation, SSRF to metadata endpoint, S3 bucket exploitation, Lambda code extraction, and persistence techniques for red team operations.

中文简介正在准备中。当前显示原文说明。

Build comprehensive attack trees to visualize threat paths. Use when mapping attack scenarios, identifying defense gaps, or communicating security risks to stakeholders.

中文简介正在准备中。当前显示原文说明。

Enables ultra-granular, line-by-line code analysis to build deep architectural context before vulnerability or bug finding.

中文简介正在准备中。当前显示原文说明。

Expert security auditor for AI Skills and Bundles. Performs non-intrusive static analysis to identify malicious patterns, data leaks, system stability risks, and obfuscated payloads across Windows, macOS, Linux/Unix, and Mobile (Android/iOS).

中文简介正在准备中。当前显示原文说明。

Run technical quality checks across accessibility, performance, theming, responsive design, and anti-patterns. Generates a scored report with P0-P3 severity ratings and actionable plan. Use when the user wants an accessibility check, performance audit, or technical quality review.

中文简介正在准备中。当前显示原文说明。

API security testing workflow for REST and GraphQL APIs covering authentication, authorization, rate limiting, input validation, and security best practices.

中文简介正在准备中。当前显示原文说明。

Automated end-to-end UI testing and verification on an Android Emulator using ADB.

中文简介正在准备中。当前显示原文说明。

You are an API mocking expert specializing in realistic mock services for development, testing, and demos. Design mocks that simulate real API behavior and enable parallel development.

中文简介正在准备中。当前显示原文说明。

Implement secure API design patterns including authentication, authorization, input validation, rate limiting, and protection against common API vulnerabilities

中文简介正在准备中。当前显示原文说明。

AUTHORIZED USE ONLY: This skill contains dual-use security techniques. Before proceeding with any bypass or analysis: > 1.

中文简介正在准备中。当前显示原文说明。

Build production Apache Airflow DAGs with best practices for operators, sensors, testing, and deployment. Use when creating data pipelines, orchestrating workflows, or scheduling batch jobs.

中文简介正在准备中。当前显示原文说明。

Provide comprehensive techniques for attacking Microsoft Active Directory environments. Covers reconnaissance, credential harvesting, Kerberos attacks, lateral movement, privilege escalation, and domain dominance for red team operations and penetration testing.

中文简介正在准备中。当前显示原文说明。