Browse Skills

Django TDD provides strategies for test-driven development in Django using pytest-django, factory_boy, and Django REST Framework. Use it when writing new Django apps, testing models and APIs, or setting up test infrastructure.

Django Verification Loop runs a multi-stage verification pipeline for Django projects, including environment checks, code quality, migrations, tests with coverage, security scans, and deployment readiness. Use it before pull requests, major changes, or releases.

E2E Testing Patterns provides Playwright patterns for building stable, fast, and maintainable end-to-end test suites, including page object models, configuration, CI/CD integration, artifact management, and flaky test strategies.

Check Links scans a vault for broken [[wiki-links]] by extracting link targets and verifying each target file exists. Use it to find link rot after renaming files or periodically maintain a knowledge base.

Code Review reviews one captured change-set snapshot with independent, parallel reviewers and validates every candidate finding, reporting only high-confidence problems introduced by that change set. Use it when asked for code review or when the Code Review action is invoked.

Automates penetration testing workflows using a multi-agent AI system with multiple AI providers and integrated security tools. Ideal for authorized security assessments, generating professional reports with evidence capture.

Active Directory Security Testing lists common AD attack, privilege escalation, lateral movement, and persistence techniques with example tools and enumeration commands. Use it as a reference during authorized security assessments.

This skill audits and remediates AWS Config conformance for Lambda and serverless workloads per CIS AWS Compute 12.1, ensuring compliance by deploying necessary conformance packs.

Cloud Assessment runs read-only security checks across AWS, Azure, and GCP using CIS-aligned audit commands. Use it to verify credentials and review IAM, storage, network, encryption, logging, DNS, and TLS settings.

CORS Misconfiguration Attack tests endpoints for risky CORS settings like origin reflection, wildcard access, null origin acceptance, and credential leakage. Use it to verify whether cross-origin requests can read sensitive data.

GraphQL Vulnerability Testing checks GraphQL endpoints for introspection exposure, query complexity abuse, batch abuse, and authorization bypass. Use it when assessing a GraphQL API for common security flaws.

Host Header Injection tests whether a web app trusts Host or related headers when building links, routing requests, or caching responses. Use it to check for password reset poisoning, cache poisoning, and routing bypass.