Security & Testing Agent Skills for HTTP / API

TechSmith security basics for Snagit COM API and Camtasia automation.

Prove termination of algorithms and programs using ranking functions and well-founded orderings

Use when the user asks for tests, mentions TDD, or when new code has been written and needs test coverage.

Detects duplicate boilerplate, copy-paste tests, and structural maintainability issues across .NET test suites.

Use this skill to test strategy changes against a fresh test repository.

Create comprehensive test scenarios from user stories with test objectives, starting conditions, user roles, step-by-step actions, and…

Write a test strategy document from a feature spec, PRD, or system description.

Classifies existing tests by standard traits and reports their distribution.

Tests REST and GraphQL APIs for Broken Object Level Authorization (BOLA/IDOR,

Tests APIs for mass assignment (auto-binding), OWASP API3:2023, by identifying

Systematically tests web applications and APIs for broken access control

Test web applications for HTTP Host header injection vulnerabilities

Test web applications for XML injection vulnerabilities including XXE,

Jest testing patterns, factory functions, mocking strategies, and TDD workflow.

Tests and validates ransomware recovery procedures - backup restore operations

Generate a test pass from a PRD, user story, or acceptance criteria — happy paths, boundaries, error handling, permissions, and…

Tests WebSocket API implementations for missing upgrade-handshake authentication,

Runs full Trailmark structural analysis by building a graph, running `preanalysis()`, and reporting hotspots, taint, blast radius…

Debugs the Buttercup CRS (Cyber Reasoning System) running on Kubernetes.

Triages and prioritizes vulnerabilities with CISA's Stakeholder-Specific