Testing

Set up Browser Use Cloud payments with x402 — pay per request from a crypto wallet (USDC on Base mainnet), no signup or API key.

Drive a locally built server with a real client: the Inspector CLI (scripted), the Inspector web UI (by hand) and an LLM client.

Web全栈攻击:SQLi/命令注入/SSTI/XSS/SSRF/NoSQL,认证JWT/OAuth/SAML,LFI/上传,Tomcat/WS/STOMP/XFF/PATH_INFO/CDN502/网宿JS挑战绕过。Use when testing Web injection, auth bypass…

Detect tool misuse and unexpected code execution via dialogue testing.

Capture and review Agent Skill observations, and create, run, diagnose, or iteratively improve Skill evaluations (evals) with the skill-up CLI.

Use for PUA/try-harder productivity coaching when the user expresses frustration, repeated failure, quality complaint, passive behavior, says retry/change…

Add ElevenLabs to a project from scratch.

Implements agent-readiness on public sites and docs from Mintlify Agent Score, AFDocs, Is Agentic, Is It Agent Ready, or url-discovery-bench reports, or from…

Live-test any Electron desktop app with native-devtools-mcp, Chrome DevTools Protocol, screenshots, OCR, and accessibility tools.

Picoclaw-only local posture-review skill focused on read-only findings and safe operator remediation guidance.

Manage major dependency version upgrades with compatibility analysis, staged rollout, and comprehensive testing.

Use context-mode tools (ctx_execute, ctx_execute_file) instead of Bash/cat when processing large outputs.

Use when asked to open, run, test, or show an app in Crabbox, including native desktops, web previews, and computer use on a temporary machine.

Zero-config Postgres for Netlify apps via @netlify/database — querying data from Functions/Edge Functions, writing schema migrations, setting up Drizzle ORM…

Manage context-mode GitHub issues, PRs, releases, and marketing with parallel subagent army.

Lints, tests, simulates, and formats Fastly VCL code using the falco tool.

Use when testing VCL against real Fastly edge infrastructure, writing assertion-based Fiddle tests, producing shareable fiddle URLs for bug reproductions…

Extends Fastly VCL with loops, functions, constants, macros, conditionals, and includes via XVCL — a VCL transpiler that compiles .xvcl files into standard VCL.

Write, route, cache, and debug Netlify Edge Functions, the Deno-based TypeScript or JavaScript handlers in netlify/edge-functions that run at the network edge…

Write, configure, and deploy Netlify serverless functions in TypeScript, JavaScript, or Go.

Suede AI code review and A-F ship grade for a diff, PR, branch, or commit range: findings ranked P0-P3 with file:line evidence and a fix path, an A-F grade…

IDOR / BOLA hunting - two-account methodology, identifier discovery and UUID leak chaining, the trusted-identifier test, GraphQL node and nested-object IDOR…

Mobius 自我测试能力。部署后自动跑、也可手动跑一组 HTTP 冒烟(健康/鉴权/核心读 API/语音配置, 可选写往返), 快速确认重新部署后系统是否真的可用。当你怀疑系统异常、或刚部署完需要验收时使用。

Clickjacking playbook.