testing▌

Specialized workflow for testing REST and GraphQL API security including authentication, authorization, rate limiting, input validation, and API-specific vulnerabilities.

High-signal, cost-aware E2E testing for web applications.

Comprehensive testing strategy design covering unit, integration, E2E testing, and TDD practices. \n \n Implements test pyramid structure with recommended ratios: 70% unit tests, 20% integration, 10% E2E tests \n Provides Given-When-Then patterns for unit testing, mocking strategies for external dependencies, and API endpoint testing examples \n Includes E2E testing guidance using Playwright for complete user flow validation and TDD red-green-refactor cycle methodology \n Covers CI/CD integratio

webapp-testing

Bypass bot detection and CAPTCHA triggers using rebrowser-playwright with stealth techniques. \n \n Uses real GPU rendering, removes WebDriver signatures, and patches fingerprinting vectors to pass bot detection tests like bot.sannysoft.com \n Requires headed mode ( headless: false ) and real Chrome browser ( channel: 'chrome' ) to be effective \n Includes addInitScript to remove navigator.webdriver property, the most common detection method \n For Python, recommends undetected-chromedriver over

Provide systematic methodologies for identifying and exploiting Insecure Direct Object Reference (IDOR) vulnerabilities in web applications. This skill covers both database object references and static file references, detection techniques using parameter manipulation and enumeration, exploitation via Burp Suite, and remediation strategies for securing applications against unauthorized access.

Backtest crypto and traditional trading strategies against historical market data. \n \n Includes 8 pre-built strategies (SMA, EMA, RSI, MACD, Bollinger Bands, Breakout, Mean Reversion, Momentum) with customizable parameters \n Calculates comprehensive performance metrics: Sharpe, Sortino, Calmar ratios, max drawdown, VaR, volatility, win rate, and profit factor \n Supports parameter grid search optimization to find best-performing configurations across strategy parameters \n Generates trade-by-

Comprehensive guidance for unit, widget, and integration testing across Flutter applications. \n \n Covers three test types with trade-off analysis: unit tests for isolated logic (fast, low maintenance), widget tests for UI components (higher confidence, more dependencies), and integration tests for end-to-end flows (highest confidence, slowest execution) \n Includes practical examples for all three test categories, from basic Counter tests to complex user flows and performance profiling \n Prov

Specialized workflow for testing web applications against OWASP Top 10 vulnerabilities including injection attacks, XSS, broken authentication, and access control issues.

Conduct comprehensive security assessments of WordPress installations including enumeration of users, themes, and plugins, vulnerability scanning, credential attacks, and exploitation techniques. WordPress powers approximately 35% of websites, making it a critical target for security testing.