“Testing”

Perform security testing of SOAP web services by analyzing WSDL definitions and testing for XML injection, XXE, WS-Security bypass, and SOAPAction spoofing.

start the dev server, discover API routes from the codebase, hit every endpoint, and report which ones return errors.

This skill should be used when the user asks to "test for broken authentication vulnerabilities", "assess session management security", "perform credential…

This skill should be used when the user asks to "pentest SSH services", "enumerate SSH configurations", "brute force SSH credentials", "exploit SSH…

Post-deploy health-check against a live URL.

Use when setting up or running the test automation infrastructure for any Orcanos project.

This skill should be used when the user asks to "test for directory traversal", "exploit path traversal vulnerabilities", "read arbitrary files through web…

boiled-claw の e2e スモークテストを実行する。gateway の pytest / Docker / HTTP ヘルスチェックをまとめて確認し、すべて Pass した場合のみ「push OK」と報告する。

Test deployed Consuelo changes against Linear task requirements and PR verification criteria.

Generates XCUITest UI tests for iOS/iPadOS apps in Swift.

Use when creating or editing any prompt (commands, hooks, skills, subagent instructions) to verify it produces desired behavior - applies RED-GREEN-REFACTOR…

Use when testing VCL against real Fastly edge infrastructure, writing assertion-based Fiddle tests, producing shareable fiddle URLs for bug reproductions…

End-to-end MCP server verification — spawn stdio server, list tools, invoke each one, verify response shape.

This skill should be used when the user asks to "test API security", "fuzz APIs", "find IDOR vulnerabilities", "test REST API", "test GraphQL", "API…

QA-test a website or web app and return a 1-5 quality score (5 = flawless, 1 = broken) with evidence.

Lints, tests, simulates, and formats Fastly VCL code using the falco tool.

Build a tight, red-capable feedback loop before diagnosing failures, then minimize, test ranked hypotheses, and lock the fix with a regression test.

Generates production-grade pytest tests in Python with fixtures, parametrize, markers, mocking, and conftest patterns.

Build Cypress test suites with component testing, E2E testing, custom commands, cy.intercept for network control, Cypress Cloud integration, and TypeScript…

AI 辅助开发的回归测试策略。包括无数据库依赖的沙盒模式 API 测试、自动化缺陷检查工作流，以及用于捕捉同一模型编写并评审代码时产生的 AI 盲区的模式。

AI辅助开发的回归测试策略。沙盒模式API测试，无需依赖数据库，自动化的缺陷检查工作流程，以及捕捉AI盲点的模式，其中同一模型编写和审查代码。

Hack Android/iOS apps (reverse engineering, API interception, bypass root detection)

This skill should be used when the user asks to "pentest WordPress sites", "scan WordPress for vulnerabilities", "enumerate WordPress users, themes, or…

Use when a SPEC, INNOVATE, or VALIDATE (Layer 2) approach hinges on an unverified runtime/library/external mechanism: run a probe from the 8-family taxonomy…