Skip to main content
skillsmp

Menu

Testing & Security

Browse agent skills for testing, QA, security auditing, and code quality

Categories, GitHub stars, and source recency help organize and order the catalog. These signals are not an endorsement, quality certification, safety review, or guarantee of fit. Open a skill detail and inspect its source before use.

343,802 results

autoreview
389.0k
openclawopenclaw/openclaw
Structured Codex, Claude, Amp, Pi, or Kimi code review when explicitly requested.
control-ui-e2e
389.0k
openclawopenclaw/openclaw
Use when testing, fixing, or extending the OpenClaw Control UI GUI with Vitest + Playwright end-to-end checks, mocked Gateway WebSocket flows, mocked dashboard runs, screenshots/videos, or agent-verifiable browser proof.
discord-user-post
389.0k
openclawopenclaw/openclaw
Post an approved message as the logged-in Discord user through the Discord desktop app. Use for release announcements or other direct user-authored Discord posts; not for OpenClaw channel sends, bots, webhooks, relays, agent sessions, or archive search.
openclaw-ghsa-maintainer
389.0k
openclawopenclaw/openclaw
Inspect, patch, validate, publish, or confirm OpenClaw GHSA security advisories and private-fork state.
openclaw-pr-maintainer
389.0k
openclawopenclaw/openclaw
Use immediately for any pasted OpenClaw GitHub issue or PR URL/number, and for OpenClaw issue/PR orchestration, review, triage, root-cause repair, PR rewrite, duplicate search, opener identity/who wrote it, author account age/activity, comments, labels, close, land, or maintainer evidence checks.
openclaw-release-validation
389.0k
openclawopenclaw/openclaw
Test the latest OpenClaw main commit through an isolated OCM copy or an explicitly approved in-place gateway update, then guide structured release feedback.
parallels-discord-roundtrip
389.0k
openclawopenclaw/openclaw
Run macOS Parallels smoke with Discord send, host verification, host reply, and guest readback proof.
prototype-openclaw-tui
389.0k
openclawopenclaw/openclaw
Build throwaway, fixture-driven OpenClaw Clack or Pi TUI prototypes and compare multiple interactive variants side by side in tmux without running the full application or touching live state.
release-openclaw-mac
389.0k
openclawopenclaw/openclaw
Run or recover OpenClaw macOS release signing, notarization, appcast, and asset promotion.
telegram-e2e-userbot
389.0k
openclawopenclaw/openclaw
Prove user-visible OpenClaw Telegram behavior on Telegram's Test Server with Convex-leased team credentials; drive real-user turns and record messages, edits, deletions, reactions, typing, or rich content.
test-audit
389.0k
openclawopenclaw/openclaw
Invoke whenever writing, changing, reviewing, or sweeping tests. Authoring gate for new tests plus audit workflow for low-value, implementation-coupled, or duplicative tests and the test-only production seams they demand.
add-model-provider
389.0k
openclawopenclaw/openclaw
Add and live-prove a model provider with non-interactive config one-liners, without exposing credentials.
1password
389.0k
openclawopenclaw/openclaw
Set up and use 1Password CLI for sign-in, desktop integration, and reading or injecting secrets.
spike
389.0k
openclawopenclaw/openclaw
Run throwaway prototypes to validate feasibility, compare approaches, and report a verdict.
audit-the-list
320.1k
vintavinta/awesome-python
Audit README.md sections against the shortlist rules — re-verify every entry's verdict with live data, promote or demote challengers, restructure oversized use cases, prune, and evaluate proposed additions. Fire when the maintainer asks to audit, sweep, prune, re-check, or maintain sections, or asks whether an entry (or a proposed one) deserves its slot.
preview-verdicts
320.1k
vintavinta/awesome-python
Generate the interactive keep/drop verdict preview (HTML page with per-row feedback controls) whenever a prune sweep, batch entry edit, or restructure needs maintainer review before touching README.md — and process the feedback JSON the maintainer pastes back.
finishing-a-development-branch
283.0k
obraobra/superpowers
Use when implementation is complete, all tests pass, and you need to decide how to integrate the work
receiving-code-review
283.0k
obraobra/superpowers
Use when receiving code review feedback, before implementing suggestions, especially if feedback seems unclear or technically questionable - requires technical rigor and verification, not performative agreement or blind implementation
requesting-code-review
283.0k
obraobra/superpowers
Use when completing tasks, implementing major features, or before merging to verify work meets requirements
test-driven-development
283.0k
obraobra/superpowers
Use when implementing any feature or bugfix, before writing implementation code
verification-before-completion
283.0k
obraobra/superpowers
Use when about to claim work is complete, fixed, or passing, before committing or creating PRs - requires running verification commands and confirming output before making any success claims; evidence before assertions always
writing-plans
283.0k
obraobra/superpowers
Use when you have a spec or requirements for a multi-step task, before touching code
implement
256.4k
mattpocockmattpocock/skills
Implement a piece of work based on a spec or set of tickets.
tdd
256.4k
mattpocockmattpocock/skills
Test-driven development. Use when the user wants to build features or fix bugs test-first, mentions "red-green-refactor", or wants integration tests.
implement-spec
256.4k
mattpocockmattpocock/skills
Implement a specification in code.
migrate-to-shoehorn
256.4k
mattpocockmattpocock/skills
Migrate test files from `as` type assertions to @total-typescript/shoehorn. Use when user mentions shoehorn, wants to replace `as` in tests, or needs partial test data.
setup-pre-commit
256.4k
mattpocockmattpocock/skills
Set up Husky pre-commit hooks with lint-staged (Prettier), type checking, and tests in the current repo. Use when user wants to add pre-commit hooks, set up Husky, configure lint-staged, or add commit-time formatting/typechecking/testing.
wait-what
256.4k
mattpocockmattpocock/skills
Stop. That last message did not land: re-pitch it.
e2e-testing
253.2k
affaan-maffaan-m/ECC
Playwright E2E testing patterns, Page Object Model, configuration, CI/CD integration, artifact management, and flaky test strategies. Use when writing Playwright tests, structuring page objects, or fixing flaky E2E runs in CI.
eval-harness
253.2k
affaan-maffaan-m/ECC
Formal evaluation framework for Claude Code sessions implementing eval-driven development (EDD) principles. Use when a Claude Code workflow needs a formal eval before it is trusted or changed.
security-review
253.2k
affaan-maffaan-m/ECC
Use this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features. Provides comprehensive security checklist and patterns.
tdd-workflow
253.2k
affaan-maffaan-m/ECC
Use this skill when writing new features, fixing bugs, or refactoring code. Enforces test-driven development with 80%+ coverage including unit, integration, and E2E tests.
verification-loop
253.2k
affaan-maffaan-m/ECC
A comprehensive verification system for Claude Code sessions. Use when verifying a Claude Code session's work before claiming it is complete.
e2e-testing
253.2k
affaan-maffaan-m/ECC
Patrones de pruebas E2E con Playwright, Page Object Model, configuración, integración CI/CD, gestión de artefactos y estrategias para pruebas inestables.

Skill content language: Undetermined

golang-testing
253.2k
affaan-maffaan-m/ECC
Patrones de pruebas Go incluyendo pruebas basadas en tablas, subpruebas, benchmarks, fuzzing y cobertura de código. Sigue la metodología TDD con prácticas idiomáticas de Go.

Skill content language: Spanish

kotlin-testing
253.2k
affaan-maffaan-m/ECC
Patrones de pruebas Kotlin con Kotest, MockK, pruebas de coroutines, pruebas basadas en propiedades y cobertura con Kover. Sigue la metodología TDD con prácticas idiomáticas de Kotlin.

Skill content language: Spanish

laravel-security
253.2k
affaan-maffaan-m/ECC
Buenas prácticas de seguridad en Laravel para autenticación/autorización, validación, CSRF, asignación masiva, subida de archivos, secretos, limitación de velocidad y despliegue seguro.

Skill content language: Spanish

laravel-tdd
253.2k
affaan-maffaan-m/ECC
Desarrollo guiado por pruebas para Laravel con PHPUnit y Pest, factories, pruebas de base de datos, fakes y objetivos de cobertura.

Skill content language: Spanish

laravel-verification
253.2k
affaan-maffaan-m/ECC
Bucle de verificación para proyectos Laravel: verificaciones de entorno, linting, análisis estático, pruebas con cobertura, escaneos de seguridad y preparación para despliegue.

Skill content language: Spanish

python-testing
253.2k
affaan-maffaan-m/ECC
Estrategias de pruebas Python usando pytest, metodología TDD, fixtures, mocking, parametrización y requisitos de cobertura.

Skill content language: Spanish

quarkus-security
253.2k
affaan-maffaan-m/ECC
Buenas prácticas de seguridad en Quarkus para autenticación, autorización, JWT/OIDC, RBAC, validación de entrada, CSRF, gestión de secretos y seguridad de dependencias.

Skill content language: Spanish

quarkus-tdd
253.2k
affaan-maffaan-m/ECC
Desarrollo guiado por pruebas para Quarkus 3.x LTS usando JUnit 5, Mockito, REST Assured, pruebas Camel y JaCoCo. Usar al agregar funcionalidades, corregir bugs o refactorizar servicios orientados a eventos.

Skill content language: Spanish

quarkus-verification
253.2k
affaan-maffaan-m/ECC
Bucle de verificación para proyectos Quarkus: build, análisis estático, pruebas con cobertura, escaneos de seguridad, compilación nativa y revisión de diff antes del lanzamiento o PR.

Skill content language: Spanish

rust-testing
253.2k
affaan-maffaan-m/ECC
Patrones de pruebas en Rust incluyendo pruebas unitarias, de integración, async, basadas en propiedades, mocking y cobertura. Sigue la metodología TDD.

Skill content language: Spanish

security-review
253.2k
affaan-maffaan-m/ECC
Usar este skill al agregar autenticación, manejar entradas de usuario, trabajar con secretos, crear endpoints de API o implementar funcionalidades de pago/sensibles. Proporciona lista de verificación y patrones de seguridad completos.

Skill content language: Spanish

springboot-security
253.2k
affaan-maffaan-m/ECC
Buenas prácticas de Spring Security para autenticación/autorización, validación, CSRF, secretos, cabeceras, limitación de velocidad y seguridad de dependencias en servicios Java Spring Boot.

Skill content language: Spanish

springboot-tdd
253.2k
affaan-maffaan-m/ECC
Desarrollo guiado por pruebas para Spring Boot usando JUnit 5, Mockito, MockMvc, Testcontainers y JaCoCo. Usar al agregar funcionalidades, corregir bugs o refactorizar.

Skill content language: Spanish

springboot-verification
253.2k
affaan-maffaan-m/ECC
Bucle de verificación para proyectos Spring Boot: build, análisis estático, pruebas con cobertura, escaneos de seguridad y revisión de diff antes del lanzamiento o PR.

Skill content language: Spanish