测试设计、漏洞检测、质量保证（1.3万 个）
Test APIs for NoSQL injection, where user input changes database queries unexpectedly. The skill focuses on MongoDB login bypass, unauthorized data retrieval, and response timing checks, and also covers Redis command injection through server-side requests.
中文简介正在准备中。当前显示英语简介。
Guide bug bounty work from checking authorized scope and discovering assets to testing web and AI features. Validate practical impact, investigate related weaknesses, and organize reproducible evidence into a vulnerability report.
中文简介正在准备中。当前显示英语简介。
Assess classic ASP.NET applications for security weaknesses in ViewState, the data used to preserve page state, exposed logs, error details, and service endpoints. Organize evidence and separate observed weaknesses from demonstrated impact when preparing findings.
中文简介正在准备中。当前显示英语简介。
Investigate security flaws in OAuth login flows, including weak redirect checks, leaked access tokens, and skipped authentication steps. The skill guides testing of web and mobile integrations and helps document demonstrated impact and reproducible findings.
中文简介正在准备中。当前显示英语简介。
Guide bug bounty work from asset discovery to validation and reporting, while resolving local locations of security tools, wordlists, and cloned projects. It covers web and AI security testing with an emphasis on demonstrated impact.
中文简介正在准备中。当前显示英语简介。
Inspect NTLM authentication responses from public IIS, SharePoint, and Exchange services to identify exposed internal domains, server names, and timestamps. Assess the disclosure in context and prepare reproducible evidence without completing authentication.
中文简介正在准备中。当前显示英语简介。
Investigate file inclusion and path traversal flaws that let applications access unintended files. The skill guides checks for sensitive data exposure and possible code execution, using content evidence or repeatable indirect signals to avoid false positives.
中文简介正在准备中。当前显示英语简介。
Find open redirects, where a website sends visitors to an externally controlled address. Check URL parameters and browser scripts, confirm actual navigation, and investigate whether the redirect can expose OAuth authorization codes or enable server-side access to internal services.
中文简介正在准备中。当前显示英语简介。
Assess gRPC services for exposed internal methods, missing access controls, identity spoofing through proxies, and unencrypted traffic. The skill guides service discovery and validates findings using response status codes, external reachability, and demonstrated effects on private data or system state.
中文简介正在准备中。当前显示英语简介。
Assess what discovered cloud credentials allow across AWS, Azure, GCP, and Kubernetes. The skill guides identity checks, permission review, and paths to higher privileges, then helps document impact, activity, and cleanup within the engagement's agreed scope.
中文简介正在准备中。当前显示英语简介。
Prepare Bugcrowd submissions with accurate vulnerability categories, evidence-based severity requests, and explanations of program scope. Structure references between related reports, document QA testing conditions, and draft responses when a finding is downgraded or considered out of scope.
中文简介正在准备中。当前显示英语简介。
Review multi-factor authentication flows for skipped checks, reused one-time codes, weak backup paths, and verification races. It focuses on proving access to protected resources rather than relying on interface behavior or response codes alone.
中文简介正在准备中。当前显示英语简介。
Assess externally exposed enterprise SSL VPN gateways by identifying products, checking known vulnerabilities, and reviewing authentication backends and SAML settings. The skill provides vendor-specific checks and a staged workflow that starts with less disruptive identification before deeper testing.
中文简介正在准备中。当前显示英语简介。
Test for race conditions, where simultaneous requests disrupt expected processing order. Investigate duplicate redemptions, balance or vote changes, and authentication or request-limit failures, then verify actual effects and record reproducibility.
中文简介正在准备中。当前显示英语简介。
Prepare an isolated local environment for manually testing DevSpace changes. Copy existing settings and state into the current checkout, build interface assets, start the development server, and refresh the test snapshot when needed.
中文简介正在准备中。当前显示英语简介。
Review completed code through three roles: a critical reviewer, a verifier, and an adjudicator. Check evidence, look for bugs introduced by fixes, and produce an actionable repair list with regression tests and traceable review reports.
中文简介正在准备中。当前显示英语简介。
Inspect agent skills, plugins, and MCP servers locally before installation. Use a reviewed scanning policy to identify malicious instructions, risky commands, secret exposure, and dependency risks, then summarize findings and recommended next steps.
中文简介正在准备中。当前显示英语简介。
Migrate TypeScript test data from type assertions to @total-typescript/shoehorn helpers. Use partial objects for focused tests and deliberately invalid data for error cases, then check that the migrated tests pass type checking.
中文简介正在准备中。当前显示英语简介。
Build features or fix bugs by writing one failing test, then the minimum code needed to pass it. Test agreed public interfaces, the boundaries callers use, to check behavior without depending on internal implementation details.
中文简介正在准备中。当前显示英语简介。
Test local web applications with Python scripts using Playwright, a browser automation tool. Verify interface behavior, investigate problems, capture screenshots, and inspect browser logs, with a helper that manages one or more application servers.
中文简介正在准备中。当前显示英语简介。
Investigate unexpected tool blocks and repeated permission prompts in Kode. The skill checks approved tools, command restrictions, inherited permissions, and session records, then verifies behavior by repeating the blocked action while preserving required user approval.
中文简介正在准备中。当前显示英语简介。
Inspect Kiln’s interface in a real browser, capture screenshots, and run or debug end-to-end tests that check complete user flows. A sandbox with sample project data provides populated screens for checking UI changes.
中文简介正在准备中。当前显示英语简介。
Check a Kiln branch or pull request through real browser interactions. Multiple agents test separate feature areas in isolated environments, then combine findings into a severity-ranked Markdown report with reproduction steps and expected versus actual behavior.
中文简介正在准备中。当前显示英语简介。
Validate a Kiln release candidate with standard code checks and selected tests against live APIs. Diagnose failures, inspect outdated model selections and coverage gaps, and produce a report with recommended actions without changing code or tests.
中文简介正在准备中。当前显示英语简介。