Testing

Run the project-ops skill bundle end to end: health, bug, security, API contract, docs, and issue reconciliation, then plan and apply verified fixes one at a…

Author and validate incident records (docs/incidents/<date>-<slug>.md): detect, mitigate first, diagnose with correlated evidence, repair with a failing test…

Gate a change on its Mutation Testing Bar: read a Stryker mutation-testing-elements JSON (or a generic killed/survived summary), compute the mutation score…

Orchestrate a panel of local AI coding CLIs (claude, codex, agy, opencode, cursor) to independently review the Pull Request currently checked out, then…

Create or update a personal -mode skill from working preferences.

Look at real hardware, screens, panels, and wiring on a desk or workbench through a camera, so Claude can SEE physical output that no unit test, log, or API…

Model state and break invariants: authority, transitions, concurrency, recovery, with TLA+ or Quint model checking, Lean proofs, or Kani-style verifiers on…

Automate websites with Playwright connected to local Lightpanda CDP only.

Automate real browsers from the terminal for navigation, forms, screenshots, extraction, and UI debugging using playwright-cli.

Run this project's full local quality gate (lint/typecheck/test commands from .harness/project.json) and report pass/fail.

Test-driven development.

Audit test suite correctness, meaningful coverage, reliability, framework compatibility, and maintenance cost; optionally write missing tests and repair…

Operate the Ducko XMPP CLI tool.

End-to-end UI testing for the Ducko macOS app using pre-built helper scripts, run in the Lume VM so the user's Mac is not disturbed.

Query ATT&CK data with attackcti, mitreattack-python, and stix2, then build MITRE ATT&CK Navigator layers and multi-layer heatmap overlays mapping one or more…

Use Scapy to craft, send, sniff, and dissect TCP/UDP/ICMP/DNS packets, analyze pcap files, implement SYN scans, and detect anomalous traffic such as…

Systematically map threat actor behavior and observed IOCs to the MITRE ATT&CK framework, build technique coverage heatmaps with the ATT&CK Navigator…

Map advanced persistent threat (APT) group TTPs to the MITRE ATT&CK framework using the attackcti Python library to query STIX/TAXII data for group-technique…

Test RAG vector stores (Pinecone, Qdrant, Weaviate, Chroma, pgvector, FAISS) for embedding inversion, cross-tenant data leakage, and data poisoning per OWASP…

Enumerate Microsoft Entra ID (Azure AD) tenants with ROADrecon and acquire, exchange, and abuse tokens (including primary refresh tokens) with roadtx.

Run OAuth 2.0 device-code and illicit-consent phishing attacks against Microsoft Entra ID, using TokenTactics-style tooling to steal access and refresh…

Drive the AADInternals PowerShell toolkit to perform Microsoft Entra ID tenant reconnaissance, access-token acquisition across Microsoft APIs, and…

Establish a repeatable operational process for triaging, testing, and deploying Microsoft Patch Tuesday security updates (Windows, Office, Exchange, SQL…

Design and execute a social engineering penetration test combining OSINT-driven target profiling with phishing, vishing, smishing, and physical pretexting…