testing▌

Testing patterns specifically designed for AI-assisted development, where the same model writes code and reviews it — creating systematic blind spots that only automated tests can catch.

Comprehensive testing strategies for Perl applications using Test2::V0, Test::More, prove, and TDD methodology.

Conduct comprehensive SSH security assessments including enumeration, credential attacks, vulnerability exploitation, tunneling techniques, and post-exploitation activities. This skill covers the complete methodology for testing SSH service security.

If you see unfamiliar placeholders or need to check which tools are connected, see CONNECTORS.md.

Conduct comprehensive security assessments of cloud infrastructure across Microsoft Azure, Amazon Web Services (AWS), and Google Cloud Platform (GCP). This skill covers reconnaissance, authentication testing, resource enumeration, privilege escalation, data extraction, and persistence techniques for authorized cloud security engagements.

Execute comprehensive web application security testing using Burp Suite's integrated toolset, including HTTP traffic interception and modification, request analysis and replay, automated vulnerability scanning, and manual testing workflows. This skill enables systematic discovery and exploitation of web application vulnerabilities through proxy-based testing methodology.

Writes failing tests first, establishing a strict implementation contract for test-driven development. \n \n Completes the RED phase of TDD by authoring behavior-focused tests that fail for the right reason, then hands off to implementation agents with objective pass criteria \n Delegates test authoring to a tdd_test_writer subagent when available, ensuring tests remain unmodified during implementation \n Detects existing test frameworks and conventions (pytest, jest, vitest, go test, cargo test

Specialized workflow for testing web applications against OWASP Top 10 vulnerabilities including injection attacks, XSS, broken authentication, and access control issues.

Custom Playwright scripts for any browser automation task, with auto-detected dev servers and visible browser execution. \n \n Auto-detects running localhost servers; writes all test scripts to /tmp to avoid project clutter \n Supports responsive design testing, login flows, form filling, link validation, screenshots, and arbitrary browser interactions \n Includes helper utilities for safe element interactions, cookie handling, table data extraction, and custom HTTP headers \n Executes via run.j

$23