Testing and QA

Create high-CTR YouTube thumbnails with AI image generation via inference.sh CLI.

Last Updated : 2026-01-21 Latest Version : zustand@5.0.10 (released 2026-01-12) Dependencies : React 18-19, TypeScript 5+

Comprehensive guidance for creating accessible web experiences that comply with WCAG standards and serve users of all abilities effectively.

Agents are autonomous subprocesses that handle complex, multi-step tasks independently. Understanding agent structure, triggering conditions, and system prompt design enables creating powerful autonomous capabilities.

Provide comprehensive techniques for testing REST, SOAP, and GraphQL APIs during bug bounty hunting and penetration testing engagements. Covers vulnerability discovery, authentication bypass, IDOR exploitation, and API-specific attack vectors.

Expert guidance for integrating external APIs into applications with production-ready patterns, security best practices, and comprehensive error handling.

Identify and exploit authentication and session management vulnerabilities in web applications. Broken authentication consistently ranks in the OWASP Top 10 and can lead to account takeover, identity theft, and unauthorized access to sensitive systems. This skill covers testing methodologies for password policies,...

Execute comprehensive web application security testing using Burp Suite's integrated toolset, including HTTP traffic interception and modification, request analysis and replay, automated vulnerability scanning, and manual testing workflows. This skill enables systematic discovery and exploitation of web application...

Source provenance, compatibility, automated checks, and current evidence depth are available on the full page.

Slash commands are frequently-used prompts defined as Markdown files that Claude executes during interactive sessions. Understanding command structure, frontmatter options, and dynamic features enables creating powerful, reusable workflows.

Source provenance, compatibility, automated checks, and current evidence depth are available on the full page.

Execute comprehensive client-side injection vulnerability assessments on web applications to identify XSS and HTML injection flaws, demonstrate exploitation techniques for session hijacking and credential theft, and validate input sanitization and output encoding mechanisms. This skill enables systematic detection and...

A first-principle approach to diagnosing and resolving errors across all languages and frameworks.

Identify and exploit file path traversal (directory traversal) vulnerabilities that allow attackers to read arbitrary files on the server, potentially including sensitive configuration files, credentials, and source code. This vulnerability occurs when user-controllable input is passed to filesystem APIs without...

Rule: Mobile-first development with consistent breakpoints, fluid layouts, relative units, and touch-friendly targets.

Funnel analysis tracks user progression through sequential steps, identifying where users drop off and optimizing each stage for better conversion.

Source provenance, compatibility, automated checks, and current evidence depth are available on the full page.

Hooks are event-driven automation scripts that execute in response to Claude Code events. Use hooks to validate operations, enforce policies, add context, and integrate external tools into workflows.

Provide systematic methodologies for identifying and exploiting Insecure Direct Object Reference (IDOR) vulnerabilities in web applications. This skill covers both database object references and static file references, detection techniques using parameter manipulation and enumeration, exploitation via Burp Suite, and...

Source provenance, compatibility, automated checks, and current evidence depth are available on the full page.

Provide production-ready shell script templates for common Linux system administration tasks including backups, monitoring, user management, log analysis, and automation. These scripts serve as building blocks for security operations and penetration testing environments.

Model Context Protocol (MCP) enables Claude Code plugins to integrate with external services and APIs by providing structured tool access. Use MCP integration to expose external service capabilities as tools within Claude Code.

Production-ready OAuth authentication for MCP servers on Cloudflare Workers.