Testing

Extends Fastly VCL with loops, functions, constants, macros, conditionals, and includes via XVCL — a VCL transpiler that compiles .xvcl files into standard VCL.

Write, route, cache, and debug Netlify Edge Functions, the Deno-based TypeScript or JavaScript handlers in netlify/edge-functions that run at the network edge…

Write, configure, and deploy Netlify serverless functions in TypeScript, JavaScript, or Go.

Suede AI code review and A-F ship grade for a diff, PR, branch, or commit range: findings ranked P0-P3 with file:line evidence and a fix path, an A-F grade…

Use when building Hono web applications or when the user asks about Hono APIs, routing, middleware, JSX, validation, testing, or streaming.

IDOR / BOLA hunting - two-account methodology, identifier discovery and UUID leak chaining, the trusted-identifier test, GraphQL node and nested-object IDOR…

Stage 1 of Clinical ASR Flywheel.

Shared discipline for every hunt-* skill: scope and authorization gating, the two-account rule, the confirmation gate that separates a real finding from a…

Mobius 自我测试能力。部署后自动跑、也可手动跑一组 HTTP 冒烟(健康/鉴权/核心读 API/语音配置, 可选写往返), 快速确认重新部署后系统是否真的可用。当你怀疑系统异常、或刚部署完需要验收时使用。

制作 Mobius 图文使用教程（理解用户意图 → Playwright 截图 → 红色编号标注 → 上传图床 → 写 markdown → 改 mkdocs → 本地构建验证 → commit/push 的全流程）。当用户说"加教程 / 写教程 / 图文教程 /…

Clickjacking playbook.

CORS misconfiguration testing playbook.

CSRF testing playbook.

Supply-chain testing via package-manager dependency confusion.

Reconnaissance and methodology playbook.

HTTP request smuggling and desynchronization testing.

Unauthorized access triage for exposed common services.

Control Chrome browser via CLI for testing, automation, and debugging.

Set up and manage local Kubernetes clusters using KIND (Kubernetes IN Docker).

Sets up and runs Atheris, the coverage-guided Python fuzzer built on libFuzzer.

Sets up and runs cargo-fuzz, the standard fuzzing tool for Cargo-based Rust projects.

Builds and applies fuzzing dictionaries so a fuzzer can produce the keywords, magic bytes, and tokens a target expects.

CI/CD与开发平台攻击深度专业技能：DevOps供应链攻击链(源码→构建→制品→发布)、代码托管平台攻击(GitHub/GitLab/Gitee)、Git对象深度利用与Secret挖掘、CI系统攻击(Jenkins CVE-2024-23897/GitHub Actions workflow注入/GitLab…

容器安全深度攻防测试专业技能（v3.0高级版）：Docker/K8s全攻击面覆盖、2025-2026最新容器逃逸CVE深度利用（runc/containerd/kernel面）、K8s完整攻击链（API Server未授权→RBAC提权→kubelet…