Skill UI

A specialized skill designed to ensure robust software quality by covering the entire testing lifecycle. This includes defining test strategies, writing unit, integration, and E2E tests, and implementing advanced testing types like performance (k6), security (OWASP), and functional testing. It guides users through coverage analysis, debugging flaky tests, and generating detailed defect and quality reports.

Provides a structured reference covering the 100 most critical web vulnerabilities, including definitions, root causes, impacts, and mitigation guidance aligned with OWASP categories to support assessments and remediation planning.

Provides an OWASP 2025-aligned vulnerability scanning mindset, supply chain defenses, attack surface mapping, and risk prioritization guidance with runtime scripts for automated validation of modern application security.

This comprehensive workflow guides users through a multi-phase process for assessing web application security. It is designed to systematically test for common vulnerabilities listed in the OWASP Top 10, including SQL injection, XSS, broken authentication, and access control issues. Ideal for professional penetration testing, security auditing, and bug bounty hunting.

Guides authorized practitioners through Nmap, Masscan, Nessus, OpenVAS, Burp Suite, and OWASP ZAP for network discovery, vulnerability assessment, web application testing, wireless security, and compliance reporting across diverse environments.

Provides a structured reference covering the 100 most critical web vulnerabilities, including definitions, root causes, impacts, and mitigation guidance aligned with OWASP categories to support assessments and remediation planning.

Functions as a Chief Security Architect assistant that performs STRIDE/PASTA threat modeling, OWASP checks, Red/Blue team simulations and incident response playbooks to harden any project before production.

Executes a deep security audit via Centinela (QA), covering OWASP Top 10 checks, dependency CVEs, secrets scans, and delivers structured findings and handoff reports.

A comprehensive utility designed to assess the security posture of modern APIs, including REST, GraphQL, and gRPC. It strictly follows the OWASP API Security Top 10 framework, testing for critical vulnerabilities such as Broken Object/Function Level Authorization (BOLA/BFLA), SQL/NoSQL injection flaws, and weaknesses in authentication mechanisms like JWT manipulation. Essential for security engineers and penetration testers validating complex microservice architectures and API gateways.

A comprehensive guide for conducting penetration testing on iOS and Android mobile applications, adhering to the OWASP MASTG. This skill covers the full mobile attack surface, including static analysis of binaries, dynamic runtime testing, and deep API security assessment. Techniques taught include bypassing certificate pinning, analyzing local data storage (Keychain, SQLite), and identifying vulnerabilities in authentication and network communication.

Guide for performing Android and iOS mobile application penetration testing with OWASP MASTG/MASVS, covering static/dynamic analysis, data storage checks, API abuse, and runtime manipulation using Frida, Objection, and MobSF.

This tool helps detect Broken Object Property Level Authorization (BOPLA) vulnerabilities, which are critical security flaws detailed in OWASP API3:2023. It scans APIs for excessive data exposure (reading sensitive fields) and mass assignment risks (modifying unintended properties) by simulating malicious requests and analyzing responses. Ideal for security testing, threat hunting, and implementing robust API security controls.