Security
4,732 results
- Accessibility TestingpetrkindlmannTest for WCAG 2.2 AA compliance with axe-core + Playwright, keyboard navigation audits, screen reader testing, ARIA pattern validation, and legal compliance mapping (ADA, EAA, Section 508). Automated tools catch 30-40% of issues — this skill covers automated and manual testing together.
- Agent Email InboxresendUse when building any system where email content triggers actions — AI agent inboxes, automated support handlers, email-to-task pipelines, or any workflow processing untrusted inbound email. Always use this skill when the user wants to receive emails and act on them programmatically, even if they don't mention "agent" — the skill contains critical security patterns (sender allowlists, content…
- Ai Qa ReviewpetrkindlmannReview EXISTING test code for quality, smells, and testability issues. Detects test smells across six dimensions — readability, reliability, diagnostic value, design, AI-generated, and coverage — analyzes testability of application code, and backs the qualitative smells with mutation testing.
- Ai System TestingpetrkindlmannTest AI/LLM features that ship in your product. Covers prompt regression testing, response quality evaluation, tool-call validation, hallucination and RAG grounding checks, nondeterministic-output strategies, red-team/safety scans, eval frameworks, and agent-as-target injection (indirect injection via tool output / RAG / scan reports, self-propagating payloads, data exfiltration via an agent)…
- Ai Test GenerationpetrkindlmannUse AI to write NEW test code from specs, PRDs, user stories, code diffs, bug reports, or OpenAPI specs. Staged pipeline: requirements extraction → risk analysis → coverage matrix → scenario generation → oracle design → test code → human review, with guardrails against hallucinated APIs and weak assertions.
- Compliance TestingpetrkindlmannTest for regulatory compliance: GDPR/CMP consent verification, Google Consent Mode v2, Global Privacy Control (GPC), CCPA/US state opt-out, EU AI Act Article 50 transparency, Better Ads Standards, and cookie-inventory auditing. Covers automated consent-flow testing, policy-based script blocking before consent, and cookie drift detection.
- Database TestingpetrkindlmannValidate database integrity, test migrations forward and backward, verify schema constraints, manage seed data, detect migration drift, and identify query performance issues. Covers PostgreSQL, MySQL, MongoDB with Prisma, TypeORM, Drizzle, and SQLAlchemy, plus Testcontainers test databases.
- Payment TestingpetrkindlmannTest payment and checkout flows end to end against PSP sandboxes — Stripe first, with the general pattern for Adyen/Braintree/PayPal. Covers Stripe test-mode card numbers and their decline codes, the 3DS/SCA challenge flow and its nested-iframe handling in Playwright, test clocks for subscription/billing-cycle simulation, webhook testing (stripe listen/trigger, signature verification…
- Playwright AutomationpetrkindlmannWrite production-grade Playwright tests in TypeScript: Page Object Model, fixtures, auto-waiting, user-facing locators, parallel execution, CI integration, sharding, and installed-version checks. Includes an explicit "do not" list for AI agents.
- Qa Project BootstrappetrkindlmannOnboard a new QA engineer to an existing codebase, or audit an existing test architecture. Produces a 30-day ramp plan: codebase orientation, framework walkthrough, test architecture audit, mentorship pairing, and first-test guidance.
- Security TestingpetrkindlmannTest application security against OWASP Top 10 (2025) with automated CI tooling: OWASP ZAP (DAST), dependency/supply-chain scanning (OSV-Scanner, SBOM, provenance), Semgrep SAST, auth/session tests (JWT, OAuth, RBAC), and XSS/CSRF/SQLi/SSRF Playwright patterns.
- Test Suite CurationpetrkindlmannAudit a whole regression suite and prune/restructure it with evidence: per-test coverage fingerprinting, AST near-duplicate clustering, CI-history mining for never-failing and flaky tests, prune decision rules (redundant/obsolete/low-value/keep), smoke/core/extended tiering by risk and defect-detection history, and a defensible "what we deleted and why" record.
- Unit TestingpetrkindlmannWrite effective unit tests with Jest, Vitest, or pytest. Covers the test-doubles taxonomy (stub/spy/mock/fake), Arrange-Act-Assert, coverage threshold configuration and CI gating, snapshot testing, fake timers, and mutation testing with Stryker/mutmut.
- Agentic EvalSandBasePlan, implement, or review agentic eval work in an existing codebase with compatibility, security, and verification controls. Use when the user explicitly requests agentic eval work.
- API DesignerSandBasePlan, implement, or review api designer work in an existing codebase with compatibility, security, and verification controls. Use when the user explicitly requests api designer work.
- Appinsights InstrumentationSandBasePlan, implement, or review application insights instrumentation work in an existing codebase with compatibility, security, and verification controls. Use when the user explicitly requests application insights instrumentation work.
- Audit SupportSandBaseCreate or review audit support deliverables with traceable assumptions, decision criteria, ownership, and risk controls. Use when the user asks for audit support planning or analysis.
- Azure Role SelectorSandBasePlan, implement, or review azure role selector work in an existing codebase with compatibility, security, and verification controls. Use when the user explicitly requests azure role selector work.
- Behave SkillSandBasePlan, implement, or review behave bdd work in an existing codebase with compatibility, security, and verification controls. Use when the user explicitly requests behave bdd work.
- Chrome DevtoolsSandBasePlan, implement, or review chrome devtools work in an existing codebase with compatibility, security, and verification controls. Use when the user explicitly requests chrome devtools work.
- CI CD And AutomationSandBasePlan, implement, or review ci/cd and automation work in an existing codebase with compatibility, security, and verification controls. Use when the user explicitly requests ci/cd and automation work.
- Claude Automation RecommenderSandBasePlan, implement, or review claude automation recommender work in an existing codebase with compatibility, security, and verification controls. Use when the user explicitly requests claude automation recommender work.
- Claude Md ImproverSandBasePlan, implement, or review claude.md improver work in an existing codebase with compatibility, security, and verification controls. Use when the user explicitly requests claude.md improver work.
- Code DocumenterSandBasePlan, implement, or review code documenter work in an existing codebase with compatibility, security, and verification controls. Use when the user explicitly requests code documenter work.