Skill UI

A comprehensive guide to using k6 for robust performance and load testing across APIs, WebSockets, and browser scenarios. Learn to write realistic load simulations (smoke, load, stress, soak), analyze performance metrics, set SLAs, and integrate testing into CI/CD pipelines to ensure system reliability before deployment.

A comprehensive guide for authorized penetration testers on identifying and exploiting insecure deserialization vulnerabilities across multiple languages (Java, PHP, Python, .NET). Covers techniques for generating payloads using tools like ysoserial and phpggc, and testing various application components such as cookies, HTTP parameters, and message queues to achieve potential Remote Code Execution (RCE).

This guide details how to integrate Static Application Security Testing (SAST) tools like CodeQL and Semgrep into your CI/CD pipelines using GitHub Actions. It covers setting up automated vulnerability detection on pull requests, tuning rules to minimize false positives, uploading SARIF results for centralized security reporting, and enforcing quality gates to prevent vulnerable code from merging into protected branches. Essential for DevSecOps and compliance (SOC 2, PCI DSS).

A comprehensive guide and set of payloads for penetration testing web applications that process XML input. It details how to test for major vulnerabilities such as XXE, XPath injection, SSRF, and XML parsing attacks, providing step-by-step workflows and advanced payloads for identifying data exposure and security flaws.

A detailed methodology for identifying Cross-Site Scripting (XSS) vulnerabilities across web applications. It guides systematic testing for Reflected, Stored, and DOM-based XSS, covering payload bypass, output encoding evaluation, and assessing Content Security Policy (CSP) protection. Essential for OWASP WSTG testing and client-side security audits.

Covers comprehensive HTML injection attack scenarios, detection tips, and tooling so security testers can validate and document injection points, phishing overlays, and reflected or stored payloads during vulnerability assessments.

This skill demonstrates how to use Playwright MCP to programmatically automate the process of inputting data into a web form. It covers various input types, including text fields, date selection, time setting, and file uploads. The process simulates realistic user interaction for data entry or form submission testing, emphasizing the ability to fill data without final submission for review purposes.

Skill that demonstrates injected eval patterns for security testing, simulating a dangerous workflow that executes fetched payloads and unsafe user input handling to help assess protection measures.

This guide details setting up a robust, local development loop for Adobe integrations (Firefly, PDF, Photoshop). It covers using the `aio` CLI for App Builder, implementing hot reload, and establishing unit/integration testing with mocking to ensure rapid, reliable iteration cycles for Adobe APIs.

A comprehensive setup guide for establishing a fast, reproducible local development environment for AssemblyAI projects. It incorporates hot reloading, local caching of transcription results, and mocked testing utilities to ensure rapid iteration cycles without relying on live API keys or incurring costs. Ideal for setting up new services or enhancing existing AI workflows.

A comprehensive guide to setting up a fast, reproducible local development environment for BambooHR integrations. This workflow incorporates hot reloading, API mocking (using MSW), and robust unit/integration testing. It allows developers to establish a rapid, isolated, and stable iteration cycle for building or testing third-party HR platform connections.

This tool provides comprehensive load testing, auto-scaling simulation, and capacity planning for Canva Connect API integrations. It is essential for performance testing, managing complex rate limits (both per-user and global), and ensuring robust, scalable production workloads for Canva-dependent applications.