Agent skills for HTTP / API

Test web applications for HTTP Host header injection vulnerabilities

Tests JWT implementations for algorithm confusion, "none" algorithm bypass,

Identifies and exploits open redirect vulnerabilities by analyzing URL

Identifying sensitive data exposure vulnerabilities including API key

Test web applications for XML injection vulnerabilities including XXE,

Tests web applications for reflected, stored, and DOM-based Cross-Site

Identifying and validating cross-site scripting vulnerabilities using

Discovering and exploiting XML External Entity injection vulnerabilities

Assessing JSON Web Token implementations for cryptographic weaknesses,

Tests authentication and authorization mechanisms in mobile application

Tests OAuth 2.0 and OpenID Connect implementations for authorization code

Apply Google Testing on the Toilet (TotT) rules when writing tests, reviewing a test diff, choosing mocks vs fakes, diagnosing brittle or…

Write effective tests across the stack—unit, integration, E2E, and visual regression.

Testing reconnaissance — inventory all tests, frameworks, coverage, CI integration, and assess testing maturity for project takeover.

Test web applications for security vulnerabilities including SQLi, XSS, command injection, JWT attacks, SSRF, file uploads, XXE, and API…

Sync tests with TestRail. Use when user mentions "testrail", "test management", "test cases", "test run", "sync test cases", "push results…

Use when writing or reviewing tests, or when asked how to write a good single test.

Use this skill when designing text-alignment and numeric-alignment decisions — choosing between left, right, center, and justified text…

Remove AI-generated filler, repetition, inflated language, and redundant comments while preserving meaning.

Analyse text complexity across quantitative, qualitative, and reader-task dimensions with scaffolding recommendations.

Generate matching visuals from text via Picsart gen-ai.