Browse QA Skills

Static application security testing using Semgrep for finding vulnerabilities, code smells, and enforcing security policies across codebases.

Comprehensive authentication testing including login flows, password policies, MFA, session management, account lockout, and SSO integration.

Advanced security analysis using GitHub CodeQL to find zero-day vulnerabilities, injection flaws, and security anti-patterns in source code.

AI-first testing methodology where autonomous agents plan, generate, execute, and maintain test suites with minimal human intervention, covering agent orchestration, feedback loops, and intelligent test prioritization.

Testing CI/CD pipeline configurations including build validation, deployment verification, rollback testing, and pipeline-as-code quality checks.

Audit error messages across web applications for clarity, helpfulness, consistency, localization readiness, and security information leakage

Audit empty states across web applications ensuring proper messaging, helpful CTAs, illustration rendering, and graceful handling when data is unavailable

Map changelog entries and release notes to corresponding test cases ensuring every shipped feature and bugfix has associated test verification

Expert-level Laravel Dusk browser testing skill for PHP/Laravel applications. Covers Chrome-based E2E testing, browser assertions, Page Objects, component testing, authentication helpers, and database integration.

Teach agents to run Nuclei DAST and API security scans in CI, write templates, and gate builds on actionable findings.

Teaches the agent to structure tests with test.step, attach evidence and annotations via test.info, use soft assertions, and produce readable, debuggable Playwright HTML reports.

Write clear bug reports with reproduction steps and severity classification

Testing GDPR compliance requirements including data deletion, consent management, data portability, right to erasure, and privacy policy enforcement.

Web application security testing using BurpSuite for proxy-based interception, scanning, and manual penetration testing of web applications.

Evaluate and red-team LLM applications with promptfoo, declarative YAML evals, assertions, model comparisons, and automated adversarial scans for prompt injection, jailbreaks, PII leaks, and unsafe outputs in CI.

Comprehensive file upload testing including format validation, size limits, malware scanning, storage verification, and concurrent upload handling.

Stress testing methodologies for finding breaking points, resource exhaustion thresholds, and degradation patterns under extreme load conditions.

Apply classic test design techniques the ISTQB way, equivalence partitioning, boundary value analysis, decision tables, state transition testing, and pairwise combinations, to derive minimal high-coverage test sets from requirements.

Modern JavaScript and TypeScript testing with Vitest, covering unit testing, integration testing, mocking, snapshots, browser mode, and Vite integration.