Testing

Comprehensive assessment of Unit / Integration / E2E three-layer test coverage, identify gaps and provide actionable recommendations.

Review test case sufficiency using Codex exec, suggest additional edge cases.

Authentication security testing - auth bypass, JWT attacks, OAuth flaws, password attacks, 2FA bypass, CAPTCHA bypass, and bot detection evasion.

Client-side vulnerability testing - XSS (reflected/stored/DOM), CSRF, CORS misconfiguration, Clickjacking, DOM-based attacks, and Prototype Pollution.

Core pentesting tools and methodology - Burp Suite usage, Playwright automation, binary analysis, testing methodology, and professional reporting standards.

Network infrastructure testing - port scanning, DNS attacks, MITM, VLAN hopping, IPv6, SMB/NetBIOS, sniffing, and DoS assessment.

Server-side vulnerability testing - SSRF, HTTP Request Smuggling, Path Traversal, File Upload, Insecure Deserialization, and Host Header injection.

Web application logic testing - business logic flaws, race conditions, access control, cache poisoning/deception, and information disclosure.

TaiyiForge 第6阶段 — TDD开发执行。四端通用。

TaiyiForge 第7阶段 — 测试验证，TEST.md。四端通用。

Phase 3 of the prd-taskmaster pipeline: smart mode selection and user handoff.

Generates 150-750+ ad variations using Alex Hormozi's combinatorial Hook x Meat x CTA framework.

Generate unit tests for specified functions using Codex exec

Verification loop — lint -> typecheck -> unit -> integration -> e2e

Expert CIS Controls v8 (CIS Top 18) advisor — implementation group scoping (IG1/IG2/IG3), control gap assessments, safeguard-level guidance, asset inventory…

Expert PCI DSS compliance advisor covering PCI DSS v4.0.1 (current) and v4.0.

Expert Section 508 compliance advisor for US federal ICT accessibility.

Use when the user asks about WordPress codebases (plugins, themes, block themes, Gutenberg blocks, WP core checkouts) and you need to quickly classify the…

API security testing - GraphQL, REST API, WebSocket, and Web-LLM attack techniques.

Injection vulnerability testing - SQL, NoSQL, OS Command, SSTI, XXE, and LDAP/XPath injection techniques.

Social engineering testing - phishing, pretexting, vishing, and physical security assessment techniques.

System exploitation testing - Active Directory attacks, privilege escalation (Linux/Windows), and exploit development.

End-to-end product development for iOS/macOS apps.

Plans, executes, and documents validation, verification, and transfer of analytical procedures under the governing framework - ICH Q2(R2) and Q14, USP…