Skill UI

A security assessment skill for identifying WebSocket vulnerabilities including Cross-Site WebSocket Hijacking (CSWSH), message tampering, handshake-layer attacks, and socket.io authorization bypasses. Requires explicit written authorization before testing. Includes reconnaissance, endpoint discovery, and exploit verification techniques for authorized security assessments.

This skill provides systematic methodologies for identifying and exploiting Insecure Direct Object Reference (IDOR) vulnerabilities in web applications. It covers detection techniques using parameter manipulation, exploitation via Burp Suite, and remediation strategies. Requires authorized security assessments and multiple test accounts to verify cross-user access. Outputs include vulnerability reports, proof of concept, and remediation recommendations.

This agent automates iOS app debugging on a booted simulator using XcodeBuildMCP. It handles project building, running, UI interaction, screenshot capture, and log monitoring. Ideal for testing and inspecting app behavior during development cycles without manual intervention.

End-to-end iOS security assessment pipeline covering app inventory, IPA acquisition, static analysis, and secret extraction. Requires explicit authorization for offensive testing and bug bounty scopes.

This comprehensive guide provides patterns and best practices for implementing robust testing strategies in modern JavaScript and TypeScript applications. It covers setting up test infrastructure, writing unit tests for functions and classes, creating integration tests for APIs, and implementing end-to-end tests for user flows, supporting TDD and CI/CD integration.

Generates Jest unit and integration tests for JavaScript or TypeScript projects. Supports mocking, snapshots, async testing, and React component testing. Ideal for verifying code logic, UI interactions, and API behavior using standard testing patterns.

This skill enables comprehensive load testing for APIs, browsers, and scalability using k6. It allows writing realistic load scenarios, analyzing performance results, and integrating tests into CI/CD pipelines. Ideal for validating SLA requirements and comparing system behavior under various load conditions.

KubeStellar Console is an open-source, multi-cluster Kubernetes dashboard (CNCF project) that provides advanced operational capabilities powered by an MCP server and built-in AI agent skills. It helps manage complex deployments across edge and cloud environments, offering AI-assisted troubleshooting, performance testing, and deep integration with major CNCF projects like Argo and Istio.

A comprehensive index of 46 production-grade test automation skills, covering E2E, unit, mobile, BDD, and cloud testing across 15+ languages. This skill equips AI coding assistants to act as senior QA architects, generating structured, real-world test code for major frameworks like Playwright, Selenium, Cypress, and Jest. It supports project setup, CI/CD integration, and cross-platform debugging.

This skill provides production-ready shell script templates for common Linux system administration tasks such as backups, monitoring, user management, and log analysis. It serves as a foundation for security operations and penetration testing environments, requiring basic bash knowledge and appropriate system permissions.

Conduct authorized security assessments for LLM applications and AI agents. Covers prompt injection, tool abuse, RAG exposure, memory poisoning, and system prompt extraction following OWASP LLM/ASI Top 10 guidelines. Includes red-teaming, vulnerability mapping, and compliance engineering for AI systems to ensure safety and robustness.

Expert skill for building Model Context Protocol (MCP) servers and tools from scratch. Covers the full development lifecycle—from defining tool schemas and resources to implementation, testing, and publishing to registries. Supports robust patterns using TypeScript and Python for integrating custom capabilities into AI agents.