Skill UI

A systematic, multi-phase guide for tackling hard bugs and performance regressions. It mandates building a robust feedback loop (e.g., failing tests, harnesses), formulating falsifiable hypotheses, targeted instrumentation, and rigorous regression testing. This methodology ensures that debugging efforts are structured, efficient, and highly reproducible, making it ideal for complex software defects.

This guide serves as the core entry point for comprehensive security testing of identity and access control mechanisms. It is designed to help testers systematically identify vulnerabilities across login flows, session management, object authorization (IDOR), and modern protocols like JWT, OAuth, CORS, and SAML. Use this when planning security audits for any web application with user accounts.

An expert playbook for systematically testing Insecure Direct Object References (IDOR) and Broken Object/Function Level Authorization (BOLA/BFLA). This guide covers finding object identifiers across all request vectors (URL, body, headers, cookies), implementing A-B testing methodologies, identifying various ID patterns, and executing horizontal or vertical privilege escalation attacks. Essential for deep API security auditing.

A comprehensive playbook for testing security flaws in OAuth 2.0 and OpenID Connect (OIDC) implementations. Use this guide to systematically check for misconfigurations in redirect URI handling, state and nonce validation, PKCE enforcement, token audience/issuer checks, and account binding vulnerabilities. Essential for reviewing applications linked to external identity providers.

A comprehensive, four-phase methodology for debugging complex software issues. It guides users through root cause investigation, pattern analysis, hypothesis testing, and controlled implementation. The core principle emphasizes finding the underlying cause rather than applying quick, symptomatic fixes, ensuring robust and reliable code improvements across various failure scenarios.

This model provides an engineering operational framework for teams that leverage AI agents to generate large volumes of code. It shifts the focus from simple syntax to process quality, robust architecture design, rigorous testing, and systematic risk control, ensuring the development of highly stable and reliable systems in AI-assisted environments.

A comprehensive strategy for regression testing in AI-assisted development. It focuses on identifying systematic blind spots, such as schema inconsistencies between sandbox and production paths, and integrating automated bug checks into the development workflow. This guide teaches how to build robust, database-free API tests to ensure code quality when AI models contribute to the codebase.

This utility executes an autonomous, iterative loop, simulating a comprehensive agent workflow. It systematically manages tasks by checking current status, predicting the optimal next action using specialized tools, executing the required task (e.g., coding, testing), logging the progress, and scheduling the next iteration. It supports task discovery from multiple sources, including team tasks, swarm tasks, and file checklists, ensuring continuous, automated progress towards a defined goal.

A comprehensive pipeline designed for Laravel projects to ensure code quality and stability before deployment. It systematically executes environment checks, linting, static analysis, full testing with coverage, security audits, migration validation, and cache preparation. Essential for robust CI/CD pipelines and pre-Pull Request validation.

A systematic guide for developers and QA teams to verify RevenueCat's subscription and in-app purchase integrations. It covers the full lifecycle, including setup prerequisites, subscription management, restore flow, and creating a verifiable QA test plan.

A comprehensive, multi-step framework for conducting systematic QA testing on web applications. This guide covers scope detection (diff-aware), tiered testing depth (Quick, Standard, Exhaustive), detailed issue taxonomy (Functional, Visual, UX, etc.), structured bug documentation, and the critical fix-and-verify loop, ensuring high code quality throughout the development cycle.

A comprehensive guide detailing advanced, authorized techniques for Active Directory security testing and red teaming. It covers critical attack vectors such as Kerberos exploitation, BloodHound path analysis, NTLM relay, and domain privilege escalation. Designed for security professionals to systematically map and exploit domain weaknesses.