Security testing for OAuth2 implementations including authorization code flow, PKCE, token handling, redirect URI validation, and scope enforcement.
Skills(SKILL.md)は、AIエージェント(Claude Code、Cursor、Codexなど)に特定の能力を追加するための設定ファイルです。
詳しく見る →Security testing for OAuth2 implementations including authorization code flow, PKCE, token handling, redirect URI validation, and scope enforcement.
Automatically generating API tests from OpenAPI/Swagger specifications including request validation, response schema checking, and edge case generation.
OpenAPI/Swagger specification validation and testing to ensure API implementations match their documented contracts with automated drift detection.
Testing distributed tracing and observability instrumentation with OpenTelemetry including span verification, metric collection, and log correlation.
Integration with Google OSS-Fuzz for continuous fuzzing of open-source projects with automated bug filing and regression tracking.
Security testing skill based on OWASP Top 10, covering ZAP scanning, security headers, input validation, authentication, and authorization testing.
Testing pagination implementations including cursor-based, offset-based, keyset pagination with edge cases, performance, and consistency verification.
Payment gateway testing including Stripe, PayPal, and Square integration testing with sandbox environments, webhook verification, and error handling.
Testing PCI-DSS compliance for payment processing including encryption validation, access control testing, and secure data storage verification.
Testing PDF generation including layout verification, content accuracy, font embedding, accessibility (PDF/UA), and cross-platform rendering consistency.
Enforcing performance budgets in CI/CD including bundle size limits, load time thresholds, Lighthouse score gates, and resource count limits.
Testing CI/CD pipeline configurations including build validation, deployment verification, rollback testing, and pipeline-as-code quality checks.
Comprehensive end-to-end testing skill using Playwright for web applications, covering page objects, selectors, assertions, waits, fixtures, and test organization.
Mobile web testing skill using Playwright device emulation covering responsive testing, touch interactions, viewport management, network throttling, geolocation testing, and mobile-specific UI patterns.
Network-level testing with Playwright including request interception, response mocking, network throttling, and HAR recording/replay.
AI-enhanced visual testing with Playwright combining screenshot comparison, visual AI engines, and intelligent diff analysis for catching visual regressions at scale.
Visual regression testing with Playwright including screenshot comparison, pixel-diff thresholds, dynamic content masking, and cross-browser visual validation.
API testing skill using Postman and Newman, covering collections, environments, pre-request scripts, test scripts, and CI/CD integration with Newman.
Automated API testing using Postman collections with Newman CLI for CI/CD integration, environment management, and test reporting.
Analyze pull request code changes to determine which tests are affected, recommend test execution order, and identify missing test coverage for modified code paths
Comprehensive prompt testing and LLM output evaluation skill covering hallucination detection, response quality scoring, regression testing for prompts, A/B testing, and building evaluation pipelines for AI-powered applications.
Property-based testing using hypothesis, fast-check, and QuickCheck to generate random test inputs and verify program invariants automatically.
PWA testing skill covering service worker validation, offline mode testing, cache strategy verification, web app manifest testing, push notification testing, install prompt testing, and background sync verification.
Testing message queue implementations including RabbitMQ, SQS, and Kafka with delivery guarantees, ordering, dead letter queues, and consumer testing.
Rails application testing with RSpec, FactoryBot, Capybara, system tests, request specs, model specs, and Rails-specific testing conventions.
Component testing using React Testing Library with user-centric queries, accessibility-focused selectors, and integration testing patterns.
Testing real-time collaborative features including conflict resolution, CRDT validation, cursor presence, and concurrent editing scenarios.
Redis testing including cache behavior verification, pub/sub testing, transaction testing, cluster failover testing, and data expiration validation.
Intelligent regression test selection using code change analysis, dependency graphs, and risk assessment to minimize test execution time.
Testing patterns for Remix applications covering loader testing, action testing, route testing, form submission testing, and nested route integration testing.
Automated responsive design testing across breakpoints, viewports, and devices with visual comparison and layout verification.
Production-grade REST API automation framework with REST Assured, POJO serialization using GSON, PayloadManager pattern, E2E integration workflows with TestNG ITestContext, and Allure reporting.
Testing retry mechanisms, circuit breakers, bulkheads, and timeout patterns for building resilient distributed systems.
Risk-based testing approach for prioritizing test efforts based on business impact, change frequency, complexity, and historical defect patterns.
Expert-level Robot Framework testing skill covering keyword-driven syntax, SeleniumLibrary, RequestsLibrary, custom Python keywords, data-driven testing, resource files, and parallel execution with Pabot.
Comprehensive Ruby testing with RSpec including describe/context/it blocks, matchers, let/before hooks, mocking with doubles, shared examples, and Rails integration.
Rust testing with built-in test framework, integration tests, doc tests, property-based testing with proptest, and cargo test configuration.
Processing and analyzing Static Analysis Results Interchange Format (SARIF) files for aggregating security findings across multiple scanning tools.
Generate and maintain visual regression screenshot baselines with intelligent diffing, responsive breakpoint coverage, and dynamic content masking strategies
Integrating screenshot-based visual testing into CI pipelines with baseline management, review workflows, and cross-platform rendering comparison.
Automated screenshot comparison testing with configurable thresholds, anti-aliasing tolerance, and responsive viewport visual validation.
Search feature testing including relevance scoring, autocomplete, typo tolerance, faceted search, pagination, and search analytics verification.
Automated detection and prevention of leaked secrets, API keys, passwords, and tokens in code using tools like gitleaks, trufflehog, and pre-commit hooks.
Expert-level Selenide UI testing skill for Java applications. Covers concise fluent API, automatic waits, smart selectors, collections, Page Objects, and integration with JUnit 5 and Gradle/Maven builds.
Advanced Selenium WebDriver framework with three Page Object Model patterns (Basic POM, Improved POM, Page Factory), retry mechanisms, Allure reporting, Excel data-driven testing, and Selenoid grid support.
Parallel test execution with Selenium Grid including hub/node configuration, Docker-based grid, cross-browser testing, and session management.
End-to-end web testing skill using Selenium WebDriver with Java, covering WebDriver setup, page objects, explicit waits, and TestNG/JUnit integration.
Static application security testing using Semgrep for finding vulnerabilities, code smells, and enforcing security policies across codebases.
Integration testing with Sentry for error tracking, performance monitoring, and release health verification in production environments.
Java BDD testing with Serenity BDD framework using the Screenplay pattern, Cucumber integration, step libraries, comprehensive reporting, and living documentation generation.