Skill UI

GraphRunner is a powerful PowerShell toolset built on the Microsoft Graph API, designed for authorized red-teaming engagements against M365/Entra ID tenants. After obtaining a valid Graph token, it enables reconnaissance, establishes persistence (e.g., injecting OAuth apps and inbox rules), performs privilege escalation, and exfiltrates sensitive data from mailboxes, SharePoint, and Teams. Use only in authorized testing environments.

This skill provides comprehensive techniques for security-testing Retrieval-Augmented Generation (RAG) pipelines. It probes for indirect prompt injection, which occurs when malicious instructions are embedded in retrieved documents, and tests for embedding-space manipulation. Using advanced tools like NVIDIA garak, Promptfoo, and PyRIT against vector stores (FAISS, Chroma, etc.), users can validate retrieval guardrails and secure CI/CD gates against adversarial inputs and data leakage.

Provides comprehensive guidelines and utilities for modern unit testing using Jest and React Native. Covers Test-Driven Development (TDD) workflows, Behavior-Driven Development (BDD) principles, advanced mocking strategies for modules and GraphQL hooks, and implementing reusable factory functions for props and data. Use this skill to write robust, maintainable, and highly structured unit tests.

A portable, framework-agnostic system designed for robust field-side observability in React or React Native apps. It establishes a strongly typed event taxonomy, ensures best-effort, non-blocking data fan-out across multiple analytics providers, and enforces consent gates for all telemetry data. This system complements synthetic testing by capturing real user vitals (LCP, INP, CLS) and behavioral events in production.

This skill provides comprehensive guidance on choosing and creating the appropriate Neon Postgres branch for development and testing workflows. Users must decide between a 'Normal' branch (for realistic migration testing with live data) or a 'Schema-Only' branch (for highly sensitive data environments). It details the decision rules, tool selection (CLI/MCP), and procedures for branch creation and resetting.

This skill automates the process of running Postman API collections using Newman CLI. It generates comprehensive scripts, including basic CLI commands, robust shell scripts, and multi-stage Jenkins pipelines. Ideal for integrating API tests into CI/CD workflows, executing data-driven tests, and ensuring reliable automation in any environment.

A powerful skill for generating scripts using Puppeteer, enabling robust browser automation, data scraping, and PDF creation. Use this when you need to simulate user interactions, perform complex web testing, or extract content from dynamic websites, including handling wait strategies, network interception, and generating media files.

This skill helps generate comprehensive and structured TestNG test cases for Java. It supports advanced testing features crucial for enterprise automation, including method grouping, data-driven testing using @DataProvider, parallel execution setup, XML suite configuration, and custom listeners. Use it when building robust, scalable, and maintainable automated test suites.

This template guides the process of turning raw A/B test results, growth experiments, or product feature data into a clear, actionable decision report. It structures the analysis beyond mere metrics by forcing the inclusion of hypothesis, setup details, result interpretation, and a final, justified decision (Ship/Stop/Iterate). Essential for Product Managers and Growth Teams.

A comprehensive strategy for regression testing in AI-assisted development. It focuses on identifying systematic blind spots, such as schema inconsistencies between sandbox and production paths, and integrating automated bug checks into the development workflow. This guide teaches how to build robust, database-free API tests to ensure code quality when AI models contribute to the codebase.

This skill provides comprehensive web browser automation capabilities for agents. It utilizes AI-optimized snapshots, reducing context size by 93% by using element references instead of full DOM. Functions include navigation, interactive element extraction, form filling, data scraping, and state management across multiple isolated sessions. Ideal for complex web testing and data extraction workflows.

This skill probes website authentication flows to identify security vulnerabilities like CSRF, redirect leaks, weak cookies, and OAuth misconfigurations. It automates login processes, analyzes trajectories, and generates structured findings reports. Suitable for pre-deployment audits, investigating token leaks, and regression testing. Sensitive data is quarantined and never exposed unredacted.