测试设计、漏洞检测、质量保证（1.3万 个）
Assess web applications for path traversal, a flaw that exposes files outside intended folders. Follow structured checks to identify vulnerable inputs, document demonstrated access, assess data exposure, and prepare remediation guidance.
中文简介正在准备中。当前显示英语简介。
Guides authorized security assessments with Metasploit, from scanning and vulnerability testing to payload generation, code used during a test, and post-exploitation investigation. It also covers session management and recording evidence of findings.
中文简介正在准备中。当前显示英语简介。
Runs HTTP load tests with gradually increasing concurrent connections. It measures response-time percentiles, throughput, and errors, identifies where performance starts to deteriorate, and recommends a concurrency level based on the results.
中文简介正在准备中。当前显示英语简介。
Test whether changing record IDs or filenames exposes another user's data in a web application. This skill guides access control checks, evidence collection, impact assessment, and fixes for IDOR, a flaw in resource authorization.
中文简介正在准备中。当前显示英语简介。
Learn how to conduct an authorized penetration test, a security assessment that checks exploitable weaknesses. Follow guidance from initial research and scanning through validation, evidence collection, and reporting with remediation recommendations.
中文简介正在准备中。当前显示英语简介。
Explains how to assess paths from limited user access to administrator privileges on Linux and Windows. Covers local permission weaknesses and Active Directory, a Windows domain management system, with tool selection and documentation guidance for authorized testing.
中文简介正在准备中。当前显示英语简介。
Test web applications for HTML injection, where user input becomes page markup. Identify affected inputs, verify stored or reflected behavior, assess visual manipulation and phishing risks, and document findings with remediation guidance.
中文简介正在准备中。当前显示英语简介。
Scan projects for known dependency vulnerabilities, exposed credentials, and risky code patterns such as SQL injection. Produces text or JSON reports with file locations and severity levels, with options to run individual checks.
中文简介正在准备中。当前显示英语简介。
Set up HTTP, HTTPS, SNMP for device information, and SMB for file sharing in a penetration testing lab. Follow configuration and testing steps to inspect exposed information, check access permissions, and review service logs.
中文简介正在准备中。当前显示英语简介。
Create Playwright tests for user workflows, APIs, and visual changes. Use TypeScript or JavaScript examples to choose reliable page elements, manage login state, diagnose intermittent failures, and configure automated test runs in CI.
中文简介正在准备中。当前显示英语简介。
Assess AWS security through penetration testing, a process for checking exploitable weaknesses. Examine IAM permissions, storage, compute resources, and credential exposure to identify privilege escalation paths and document security audit findings.
中文简介正在准备中。当前显示英语简介。
Assess Linux systems for weaknesses that let a regular user gain administrator access. Guides inspection of permissions, scheduled tasks, and vulnerable components, with findings, evidence, and remediation recommendations documented for review.
中文简介正在准备中。当前显示英语简介。
Assess Azure, AWS, and GCP security through resource inventories, authentication checks, permission reviews, and misconfiguration testing. Supports authorized assessments that document exposed credentials, rate risks, and recommend improvements for each cloud platform.
中文简介正在准备中。当前显示英语简介。
Plan and coordinate penetration tests with checklists covering objectives, scope, environment preparation, tester selection, monitoring, and follow-up. Helps teams define deliverables, prioritize vulnerabilities, arrange fixes and verification, and clean up test accounts and artifacts.
中文简介正在准备中。当前显示英语简介。
Test REST, SOAP, and GraphQL APIs for authentication flaws, improper access to other users’ records, and unsafe input handling. Guides endpoint discovery and request variations to identify vulnerabilities and document evidence of unauthorized access.
中文简介正在准备中。当前显示英语简介。
Check code and agent outputs, track reliability scores, and roll back changes that fail a chosen threshold. Includes quality reports, live monitoring, and integration with automated build and deployment workflows.
中文简介正在准备中。当前显示英语简介。
Review and strengthen security in claude-flow v3 by addressing dependency risks, password hashing, credential generation, input validation, file paths, and command execution. It also guides threat modeling and tests for security-critical code.
中文简介正在准备中。当前显示英语简介。
Look across feedback, operational data, errors, and delivery failures over a defined period to find recurring problems. Trace patterns to shared causes, examine earlier fixes, and recommend systemic changes, implementing and verifying them only when configured policies allow.
中文简介正在准备中。当前显示英语简介。
Verify BB workflows in an isolated development app using browser interactions and the matching source CLI. Select relevant checks, collect screenshots and persisted-state evidence, and report passes, failures, untested cases, and blockers separately.
中文简介正在准备中。当前显示英语简介。
Collect user-provided API keys and other credentials through a form and save them to a specified dotenv configuration file. Request multiple variables together without exposing their values in chat, command arguments, or output visible to the agent.
中文简介正在准备中。当前显示英语简介。
Create a repository-specific verification skill and a comprehensive feature map for an app. It documents launch, UI, CLI, and API checks, then runs the instructions to capture evidence and distinguish verified features from untested or blocked ones.
中文简介正在准备中。当前显示英语简介。
Audit an existing app verification skill against source code and the running application. Update outdated instructions, feature maps, and test helpers using evidence, while reporting product bugs and blocked checks separately.
中文简介正在准备中。当前显示英语简介。
Review new and existing tests for meaningful behavior coverage, duplication, and dependence on implementation details. Gather evidence before cleanup, preserve tests that protect independent contracts, and verify that removed tests leave their regression checks covered elsewhere.
中文简介正在准备中。当前显示英语简介。
Run Unity tests in EditMode or PlayMode, selecting specific assemblies, namespaces, classes or methods. Review individual outcomes and durations, filter results, and include failure messages, logs or stack traces to investigate problems.
中文简介正在准备中。当前显示英语简介。