Skill UI

This skill functions as an expert in workflow automation, specializing in designing and implementing robust CI/CD pipelines and GitHub Actions workflows. It guides users through automating the entire development lifecycle—from building and testing to secure deployment. By establishing clear stages, handling secrets, and defining rollback strategies, it ensures consistency, reduces manual effort, and accelerates delivery while maintaining high quality and security standards.

Run targeted file path traversal assessments to find directory traversal and LFI vulnerabilities across web parameters, verify exploitation payloads, and document sensitive files exposed via automated fuzzing and manual checks.

Guides security pros through WordPress 7.0 attack surfaces covering discovery, enumeration, vulnerability scanning, credential checks, and exploitation with WPScan, Burp, Metasploit, and manual curl probes for authorized assessments.

Run targeted file path traversal assessments to find directory traversal and LFI vulnerabilities across web parameters, verify exploitation payloads, and document sensitive files exposed via automated fuzzing and manual checks.

This skill manages complex coding tasks from initial implementation through testing, review incorporation, deployment, and final runtime verification. It ensures the task meets explicit Definition of Done (DoD) criteria iteratively, minimizing the need for manual prompting across multiple development stages.

A comprehensive guide for manually assessing critical business rules and workflows in web applications. This technique goes beyond automated scanning by simulating attacks like price manipulation, multi-step process bypass, and privilege escalation. Ideal for securing e-commerce checkout funnels, financial transactions, and complex authorization systems.

A comprehensive guide to setting up CI/CD pipelines for ElevenLabs integrations. It implements a robust two-tier testing strategy: running mocked unit tests on every push to save API quota, and executing gated, real integration tests only on main branches or manually. Essential for automated validation of TTS projects using GitHub Actions.

This playbook is designed for advanced vulnerability assessment, covering flaws invisible to automated scanners. It guides testing for race conditions, complex workflow bypasses, state machine manipulation, financial parameter tampering (e.g., price/quantity manipulation), and coupon/credit abuse in multi-step applications. Essential for deep manual security testing.

This skill automatically generates comprehensive unit tests based on provided source code. It supports multiple programming languages (Python, JavaScript, Java, Go, Rust) and popular testing frameworks (pytest, Jest, JUnit). Use it to improve code coverage, test boundary conditions, and validate error handling efficiently, saving manual testing time.

This skill generates a complete, actionable CI/CD playbook, thoroughly documenting the entire software deployment lifecycle. It covers essential stages like build & linting, unit/integration testing, security scanning, and phased deployment to staging and production. The output provides clear guidelines on required inputs, automated gates, manual approvals, and necessary rollback procedures, which is crucial for engineering documentation and team onboarding.

This skill automatically generates fully structured, import-ready Postman Collection v2.1 JSON files. It can interpret both natural language descriptions of REST APIs (endpoints, methods, parameters) and raw cURL commands. Use it whenever you need to quickly set up a comprehensive API testing suite in Postman without manual JSON construction, ensuring all variables and environments are properly extracted.

A comprehensive white-box security auditing workflow designed for proprietary source code. It integrates static analysis security testing (SAST) tools like Semgrep and CodeQL to detect common vulnerabilities (e.g., injection, IDOR, crypto misuse), followed by mandatory manual threat modeling and verification steps. Applicable for PR reviews and pre-deployment security checks.