opentest

Run automated security scanning on a web app or API. Invoke when the user wants to find security vulnerabilities, run OWASP ZAP scans, check for common web vulnerabilities (XSS, SQL injection, insecure headers, misconfigurations), or get a security assessment. Trigger when the user says "scan for vulnerabilities", "security audit", "run OWASP scan", "check for XSS/SQLi", "security test my app", or mentions ZAP, DAST, or penetration testing.

Run performance and load tests against an API or web app. Invoke when the user wants to measure response times, throughput, error rates under load, or find performance regressions. Trigger when the user says "load test", "stress test", "performance test", "benchmark my API", "test under load", "how many requests per second can it handle", or provides a URL and wants performance metrics. Also trigger when the user mentions k6, load testing, or wants to check SLAs (response time < 200ms, error rate < 1%).

Run accessibility audit on a web page or application. Invoke when user wants WCAG compliance checking or accessibility issue detection.

This skill should be used when the user wants to test an API, analyze an API spec, generate API test plans, run automated API tests, or check for security vulnerabilities. Trigger when the user says "test my API", "analyze this spec", "run API tests", "generate test code for my API", "check my OpenAPI file", "test my Postman collection", or provides an OpenAPI/Swagger/Postman/GraphQL spec file or URL. Also trigger when the user mentions Schemathesis, contract testing, or wants to validate their REST API.

Guide for creating effective skills. This skill should be used when users want to create a new skill (or update an existing skill) that extends Claude's capabilities with specialized knowledge, workflows, or tool integrations.

Analyze and review the UI/UX of a web application to produce actionable recommendations, identify usability issues, and evaluate design quality. Use when the user wants to audit UX, review UI design, get UX improvement suggestions, evaluate usability, check design consistency, or assess user experience quality. Trigger when the user says "review my UX", "audit my UI", "analyze my design", "check usability", "give UX feedback", "UX review", or provides a URL for UX/design evaluation.

This skill should be used when the user wants to test a web app end-to-end, crawl a UI, generate Playwright tests, check user flows, or validate frontend behavior in a browser. Trigger when the user says "test my web app", "crawl this URL", "generate E2E tests", "write Playwright tests", "check my login flow", "test my checkout flow", or provides a URL to a web application. Also trigger when the user mentions Playwright, Page Object Model (POM), user journey testing, or wants to validate that a UI works correctly.