Explorar skills

Assess web applications against OWASP WSTG and OWASP Top 10 with reproducible evidence capture.

Identify and document boundary conditions, corner cases, error scenarios, and validation requirements that implementations must handle. Use when the user asks to find edge cases, identify corner cases, specify validation rules, enumerate error scenarios, harden a function against bad inputs, or think through what can go wrong at the boundaries of a system. NOT for writing the actual tests (use tes

Um enxame autônomo de engenharia de qualidade que gera código pronto para produção através de verificação comportamental contínua, testes E2E exaustivos e ciclos de correção auto-reparáveis. Ele integra DDD+ADR+TDD com especificações BDD/Gherkin, 7 portões de qualidade, previsão de defeitos, testes de caos e consciência de dependência entre contextos, suportando diversas arquiteturas.

Design, evaluate, and iteratively improve prompts for LLMs — system prompts, few-shot examples, reasoning structures, and instruction templates. Use when the user asks to improve a prompt, write a system prompt, optimize LLM instructions, reduce hallucinations through prompt structure, test prompt variants, or apply prompting techniques (structured reasoning, ReAct, few-shot, structured output). N

Xcode Cloud CI/CD configuration, workflows, custom scripts, testing, deployment, and optimization. Use when setting up or troubleshooting Xcode Cloud pipelines.

Design Gmail, Drive, Sheets, and Calendar automations with scope-aware plans. Use for repeatable daily task automation with explicit OAuth scopes and audit-ready outputs.

Assess Active Directory identity attack paths including roasting, relay, and delegation abuse.

Run controlled exploitation against confirmed vulnerabilities while enforcing scope and authorization gates.

Apply outcome-over-output product thinking — separating what gets built from what actually changes for the user, running the "so what" test to climb from output to outcome to impact, choosing leading vs lagging metrics, and identifying a North Star metric. Use when the user asks whether something is an outcome or an output in a product context, wants to run the "so what" test on a deliverable, wan

Aggregate findings and generate multi-format pentest reports with remediation roadmap and risk scoring.

Diagnoses why tests pass inconsistently and suggests fixes for timing, ordering, and state isolation issues.

Build repeatable data-to-Docs pipelines from Sheets and Drive sources. Use for automated status reports, template-based document assembly, and scheduled publishing workflows.