“Testing”

Use for flaky or nondeterministic tests, especially local-vs-CI inconsistencies.

Perform QA testing on running web applications using cmux_browser.

Run QA testing on a page, feature, or full site at one of three depth tiers (smoke, standard, full).

Comprehensive API validation covering functional, performance, and security testing with automation frameworks and CI/CD integration.

Generates Flutter widget tests, integration tests, and golden tests in Dart.

Build and deploy a full local OpenMetadata stack with Docker to test your connector in the UI.

Live-test any Electron desktop app with native-devtools-mcp, Chrome DevTools Protocol, screenshots, OCR, and accessibility tools.

Regression testing strategies for AI-assisted development.

Provide comprehensive techniques for penetration testing AWS cloud environments.

Automatically generate comprehensive test cases from API definitions, endpoint descriptions, OpenAPI/Swagger specs, Postman collections, or raw HTTP…

Regression testing strategies for AI-assisted development.

CI/CD与开发平台攻击深度专业技能：DevOps供应链攻击链(源码→构建→制品→发布)、代码托管平台攻击(GitHub/GitLab/Gitee)、Git对象深度利用与Secret挖掘、CI系统攻击(Jenkins CVE-2024-23897/GitHub Actions workflow注入/GitLab…

Use when verifying changed behavior in a real running app or service with recorded HTTP, browser, or CLI evidence, including acceptance criteria and cheap…

Regression testing strategies for AI-assisted

Property-based testing of HTTP APIs against an OpenAPI or GraphQL specification using Schemathesis.

Picoclaw-only local posture-review skill focused on read-only findings and safe operator remediation guidance.

Runtime verification methodology for Vendix: curl for API/auth contracts and Playwright MCP for frontend end-to-end flows, run against the real local vhost…

容器安全深度攻防测试专业技能（v3.0高级版）：Docker/K8s全攻击面覆盖、2025-2026最新容器逃逸CVE深度利用（runc/containerd/kernel面）、K8s完整攻击链（API Server未授权→RBAC提权→kubelet…

LDAP注入深度测试与域渗透联动高级技能：RFC 4515过滤器语义深度、AND/OR注入、通配符滥用横向接管、认证绕过、RDN/过滤器混淆、盲注高效提取（二分/位运算OID/OAST外带）、非标准属性与AD专属属性利用、LDAPS/StartTLS/通道绑定与NTLM Relay、Spring Data…

This skill outlines methodologies for performing authorized penetration testing against AWS, Azure, and GCP cloud environments.

XPath/XQuery注入深度攻防专业技能：认证绕过、盲注高效提取（二分/字符集二分/位运算/超时外带/OAST）、任意节点读取完整攻击链、XPath 1.0/2.0/3.1差异、XQuery注入面（BaseX/eXist/MarkLogic）、XML安全联动（XXE/XInclude/XSLT…

Mobius 自我测试能力。部署后自动跑、也可手动跑一组 HTTP 冒烟(健康/鉴权/核心读 API/语音配置, 可选写往返), 快速确认重新部署后系统是否真的可用。当你怀疑系统异常、或刚部署完需要验收时使用。

网络渗透测试/红队攻击链深度专业技能（资深攻防专家版 v3.0）：红队攻击链整体规划与MITRE ATT&CK TTP映射、目标建模与决策树、高级外网打点(钓鱼联动/供应链/云资产入口)、隧道代理与C2隐蔽、内网信息收集与BloodHound CE图分析、AD域渗透深化(Kerberoast/DCSync/ADCS…

Test the changed behaviour of a running app from the outside - curl for backend, a real browser for frontend, the known use cases and a monkeytest.