Testing

XPath/XQuery注入深度攻防专业技能：认证绕过、盲注高效提取（二分/字符集二分/位运算/超时外带/OAST）、任意节点读取完整攻击链、XPath 1.0/2.0/3.1差异、XQuery注入面（BaseX/eXist/MarkLogic）、XML安全联动（XXE/XInclude/XSLT…

Inspect, safely test, and assess one Runx skill package for capability, trust, and operator readiness.

测试网络的上传和下载速度。当用户提到测网速、网速测试、宽带测速时使用。

Designer's eye QA: finds visual inconsistency, spacing issues, hierarchy problems, AI slop patterns, and slow interactions — then fixes them.

Plan-then-execute implementation against SPEC.md.

Use when validating Chat2API Manager proxy behavior across dialogue, tool calling, context, provider routing, request logs, and live client replay workflows.

Calibrated interrogation of a fuzzy idea before it becomes a spec.

Autonomous audit-to-fix pipeline — find issues, classify, fix, test, commit

Audit an executed AI phase's evaluation coverage and produce an EVAL-REVIEW.md remediation plan.

Set up build environment and test fixtures for COBOL-to-Java migrations.

Live-device iOS QA for SwiftUI apps.

Iterate on a GitHub pull request — drive it through CI, code review, and QA until it is merge-ready.

Fix browser/API/CLI/job/worker/webhook bugs.

Score code migration quality based on coverage and correctness.

AI-driven testing agent that auto-discovers, generates, executes, evaluates, and fixes tests for any project type

AI-first application patterns, LLM testing, prompt management

Use when testing invalid agent validation

TDD and coverage standards for Engram.

内网渗透测试深度专业技能：本地信息收集与凭证窃取(mimikatz/LSASS/ntds.dit)、内网探测与隐藏隧道(frp/Chisel/DNS/ICMP)、Windows/Linux提权、横向移动矩阵(IPC/WMI/DCOM/PSEXEC)、AD域渗透与域控接管(Zerologon/Kerberoast/AD…

Create and edit `.pptx` presentations safely, export thumbnails for QA, and build polished decks with pptxgenjs plus OOXML editing.

Structured, adversarial, multi-phase security audit of a codebase — recon → coverage-led hunting → finder≠validator validation → machine-readable findings →…

构建和维护领域知识图谱，帮助团队整理概念关系、术语定义和知识体系。支持技术、产品、业务等多种知识域。

Read a selected Google Calendar's bounded events or free/busy window through a governed connection, preserving coverage and time semantics for downstream…

Read the workspace's runs and skill catalog, then return deterministic run outcomes, paused runs, catalog test coverage, and governance follow-ups without…