Skill UI

This skill simulates high-impact container breakout techniques, demonstrating how to achieve root compromise on the underlying host operating system. It covers exploiting misconfigurations (e.g., privileged pods, hostPath mounts, exposed Docker sockets) and leveraging known vulnerabilities in runC/containerd, making it essential for authorized penetration testing and assessing the blast radius of a compromised microservice.

GraphRunner is a powerful PowerShell toolset built on the Microsoft Graph API, designed for authorized red-teaming engagements against M365/Entra ID tenants. After obtaining a valid Graph token, it enables reconnaissance, establishes persistence (e.g., injecting OAuth apps and inbox rules), performs privilege escalation, and exfiltrates sensitive data from mailboxes, SharePoint, and Teams. Use only in authorized testing environments.

Detailed methods for red-teaming and penetration testing of LLM applications. This skill extracts sensitive system prompts, secrets, and embedded logic using advanced techniques like jailbreaking, encoding tricks, and automated scanners (Garak, Promptfoo), ensuring compliance with OWASP LLM07:2025.

This skill automatically generates fully structured, import-ready Postman Collection v2.1 JSON files. It can interpret both natural language descriptions of REST APIs (endpoints, methods, parameters) and raw cURL commands. Use it whenever you need to quickly set up a comprehensive API testing suite in Postman without manual JSON construction, ensuring all variables and environments are properly extracted.

This skill automates the process of running Postman API collections using Newman CLI. It generates comprehensive scripts, including basic CLI commands, robust shell scripts, and multi-stage Jenkins pipelines. Ideal for integrating API tests into CI/CD workflows, executing data-driven tests, and ensuring reliable automation in any environment.

A powerful skill for generating scripts using Puppeteer, enabling robust browser automation, data scraping, and PDF creation. Use this when you need to simulate user interactions, perform complex web testing, or extract content from dynamic websites, including handling wait strategies, network interception, and generating media files.

A comprehensive skill for generating keyword-driven automated test scripts using Robot Framework. It supports front-end UI testing via SeleniumLibrary, robust API integration using RequestsLibrary, and complex custom keywords. Ideal for building end-to-end and functional test suites.

This skill generates comprehensive unit and component tests using Vitest, a fast testing framework built for Vite. It supports JavaScript and TypeScript, offering a Jest-compatible API with advanced features like ESM support, HMR, advanced mocking (vi.mock), snapshot testing, and React component rendering. Use it when dealing with unit testing, TDD, or configuring vitest.config.ts.

A comprehensive strategy for regression testing in AI-assisted development. It focuses on identifying systematic blind spots, such as schema inconsistencies between sandbox and production paths, and integrating automated bug checks into the development workflow. This guide teaches how to build robust, database-free API tests to ensure code quality when AI models contribute to the codebase.

This guide outlines how to build new API connectors or providers that strictly adhere to the existing integration architecture and patterns of a target repository. It is designed for adding integrations while maintaining architectural consistency (e.g., layout, configuration schema, authentication model, and testing style), preventing the creation of novel, unsupported patterns.

This skill provides comprehensive web browser automation capabilities for agents. It utilizes AI-optimized snapshots, reducing context size by 93% by using element references instead of full DOM. Functions include navigation, interactive element extraction, form filling, data scraping, and state management across multiple isolated sessions. Ideal for complex web testing and data extraction workflows.

A comprehensive guide to implementing Test-Driven Development (TDD) for Django projects. This skill covers the full Red-Green-Refactor cycle, utilizing pytest, pytest-django, and factory_boy to write robust unit and integration tests for Django models, views, and DRF APIs. Essential for developers aiming to build large-scale, high-quality Python applications.