“API testing”

Use when reviewing PRs for the TypeScript Delivery SDK—API, tests, bundler impact, semver.

API authorization matrix — roles, IDOR/BOLA, BFLA, mass-assignment.

Audit established domain terms across glossaries, ADRs, code, schemas, APIs, tests, UI, and external contracts.

Helps agents discover and load the right CHERENKOV skill for any task — API testing, HITL review, MCP setup, certification, and more.

Regression testing strategies for AI-assisted development.

Use for SplitShare security review, filesystem attack cases, transfer robustness, API integration tests, Playwright E2E, or release acceptance evidence.

Regression testing strategies for AI-assisted development.

Test AI-powered features including LLM prompts, tool calls, nondeterministic outputs, evaluation frameworks, and hallucination risk assessment.

Test authorized web, API, authentication, and AI-assisted application boundaries with Hercules when a specific application weakness or workflow needs focused…

Designs GraphQL schemas, resolvers, query/mutation/subscription patterns, and protobuf definitions for gRPC services.

Use for flaky or nondeterministic tests, especially local-vs-CI inconsistencies.

Provide comprehensive techniques for testing REST, SOAP, and GraphQL APIs during bug bounty hunting and penetration testing engagements.

Guides Stripe integration decisions across development and test environment planning (separate sandboxes vs the shared test mode sandbox), API selection…

Implement consumer-driven contract testing with Pact.js.

Review code changes for bugs, regressions, security issues, missing tests, API contract breaks, data risks, performance risks, maintainability problems, and…

TDD and testing skills for iOS/macOS apps.

Generate Newman CLI run commands with the correct flags, options, and configurations.

依据真实 OpenAPI、路由实现和现有测试生成并验证 API 测试。用于用户要求测试接口、补集成测试、验证 API 契约、生成回归用例或排查接口兼容性时；区分“生成测试”和“执行请求”的授权，不猜测状态码、响应结构或 SLA，不在未确认环境中发送写请求。

Integration testing for AI Agent CLI systems — PTY-driven conversation simulation, tool chain verification, OpenSpec-driven test design, and real-API…

Professional web application and API security testing workflows using OWASP Top 10 methodologies.

Use when adding, updating, or reviewing tests in agent-eval, choosing test coverage, organizing Vitest tests, or isolating filesystem, Docker, and other…

Design statistically sound GTM experiments for copy, channels, landing pages, sequencing, pricing, and funnel conversion.

Use when setting up SDK testing, configuring contract tests, writing Arazzo test workflows, or running integration tests.

Toolkit for interacting with and testing local web applications using Playwright.