Skill UI

Automates generation and execution of API endpoint tests for REST and GraphQL services, covering CRUD operations, authentication workflows, OpenAPI contract validation, and response verification (status, headers, body).

Automates generation and execution of API endpoint tests for REST and GraphQL services, covering CRUD operations, authentication workflows, OpenAPI contract validation, and response verification (status, headers, body).

Coordinates AI-assisted debugging, observability, and regression tooling across specialized agents to analyze production incidents, isolate root causes, apply minimal fixes, and verify prevention via testing and monitoring.

Provides observability engineers with production-grade monitoring, logging, tracing, and reliability guidance for enterprise applications, covering SLIs/SLOs, dashboards, alerting, incident response, chaos testing, and modern telemetry stacks.

Implements response caching for OpenRouter to cut costs and latency, from simple LRU caches to semantic similarity reuse. Setup requires OpenRouter integration, caching infrastructure (Redis), testing and monitoring.

Minimal OpenRouter hello world example to verify API connectivity and learn the request/response flow when setting up the SDK for testing or demos.

Automates load, stress, spike, and endurance tests through the performance-test-suite plugin, collecting response time, throughput, and error-rate metrics to spot CPU/memory/database/network bottlenecks and deliver graphs plus optimization guidance.

Automates performance testing response time analysis by guiding through best practices, helping you build production-ready scripts and configurations, and validating outputs whenever response time analyzer tasks are requested.

Use Falco YAML rules and the Falco gRPC API to monitor syscalls and runtime behavior in containers or Kubernetes, catching shell spawns, file tampering, network anomalies, and privilege escalation while parsing alerts to support incident response and security testing.

Use the VirusTotal API v3 to pull detection verdicts, sandbox behavior, YARA hits, related indicators, and threat context for malware file hashes, helping SOC analysts triage alerts and validate IOCs during response or testing.

This skill covers the comprehensive automation of X.509 certificate lifecycle management, including requesting, issuing, deploying, monitoring, renewing, and revoking certificates. Utilizing Python and the ACME protocol (like Let's Encrypt), it helps organizations mitigate security risks and prevent service outages caused by expired or poorly managed certificates. Ideal for security auditing, incident response, and continuous security testing.

Guides penetration testers through identifying CORS misconfigurations on web APIs, validating origin handling, preflight responses, and crafting PoCs to prove sensitive data can be accessed cross-origin during authorized assessments.