# Skills for Testing and QA

Skills for Testing and QA: what each one does, an install command and example prompts.

1762 cards · page 15 of 45

- HTML: https://affpapa.org/en/nevibecode/skills/topic/testing?page=15
- Instructions for agents: https://affpapa.org/en/nevibecode/agents.md

- [migrate-xunit-to-mstest](https://affpapa.org/en/nevibecode/skills/migrate-xunit-to-mstest.md) — skill · dotnet · Claude Code, Codex, Cursor +3 · 2900 installs — Converts .NET test suites from xUnit.net v2 or v3 to MSTest v4 while preserving VSTest or MTP runners.
- [ai-team-orchestration](https://affpapa.org/en/nevibecode/skills/ai-team-orchestration.md) — skill (official GitHub) · github · GitHub Copilot · 381 installs — Bootstraps a lightweight multi-agent team inside your editor.
- [gravitas](https://affpapa.org/en/nevibecode/skills/gravitas.md) — skill · udaysharmadev · Claude Code, Codex, Cursor +3 · 4100 installs — Makes a coding agent read the code before touching it and call a task done only when a validator proves it.
- [cmux-capture](https://affpapa.org/en/nevibecode/skills/cmux-capture.md) — skill · manaflow-ai · Claude Code, Codex, Cursor +3 · 383 installs — Capture a cmux window as an image or video from the CLI.
- [testing-api-for-broken-object-level-authorization](https://affpapa.org/en/nevibecode/skills/testing-api-for-broken-object-level-authorization.md) — skill · mahipal · Claude Code, Codex, Cursor +3 · 541 installs — Tests REST and GraphQL APIs for BOLA and IDOR flaws by swapping object identifiers across requests.
- [harness-engineering](https://affpapa.org/en/nevibecode/skills/harness-engineering.md) — skill (official GitHub) · github · GitHub Copilot · 366 installs — Turns repeated coding agent mistakes into repository rules, drift checks, and regression tests.
- [testing-jwt-token-security](https://affpapa.org/en/nevibecode/skills/testing-jwt-token-security.md) — skill · mahipal · Claude Code, Codex, Cursor +3 · 536 installs — A skill that walks an agent through JWT weaknesses: algorithm confusion, weak HMAC secrets, authorization bypass.
- [angular-testing](https://affpapa.org/en/nevibecode/skills/angular-testing.md) — skill · analogjs · Claude Code, Codex, Cursor +3 · 6400 installs — An abandoned Angular testing skill whose instructions were pulled out.
- [code-review](https://affpapa.org/en/nevibecode/skills/getsentry-code-review.md) — skill · getsentry · Claude Code, Codex, Cursor +3 · 5500 installs — A skill that reviews pull requests and code changes against Sentry engineering practices: security, performance, tests, design.
- [testing-for-broken-access-control](https://affpapa.org/en/nevibecode/skills/testing-for-broken-access-control.md) — skill · mahipal · Claude Code, Codex, Cursor +3 · 522 installs — Guides testing of web apps and APIs for broken access control flaws under OWASP A01:2021.
- [playtest-report](https://affpapa.org/en/nevibecode/skills/playtest-report.md) — skill · Donchitos · Claude Code, Codex, Cursor +3 · 589 installs — Generates playtest report templates or turns raw playtest notes into structured findings with design checks.
- [scaffold-dotnet-test-project](https://affpapa.org/en/nevibecode/skills/scaffold-dotnet-test-project.md) — skill · dotnet · Claude Code, Codex, Cursor +3 · 2600 installs — Creates or repairs a .NET test project: finds why CI discovers zero tests and wires the project into the solution file CI actually uses.
- [yao-meta-skill](https://affpapa.org/en/nevibecode/skills/yao-meta-skill.md) — skill · Yao Team · Claude Code, Codex, Cursor +3 · 668 installs — Builds, audits, and evaluates agent skills from workflows, scripts, and standard procedures.
- [godot-gdscript-headless-testing](https://affpapa.org/en/nevibecode/skills/godot-gdscript-headless-testing.md) — skill · gamedev-skills · Claude Code, Codex, Cursor +3 · 3100 installs — Runs GDScript test suites in Godot 4 via godot --headless and returns real process exit codes.
- [wp-abilities-verify](https://affpapa.org/en/nevibecode/skills/wp-abilities-verify.md) — skill · WordPress · Claude Code, Codex, Cursor +3 · 2600 installs — Verifies WordPress plugin Abilities API registrations, flags hidden database writes in readonly callbacks, and validates schemas.
- [playwright-skill](https://affpapa.org/en/nevibecode/skills/testdinocom-playwright-skill.md) — skill · testdino.com · Claude Code, Codex, Cursor +3 · 6200 installs — Supplies the agent with 79 reference guides for Playwright 1.64 across TypeScript and JavaScript.
- [elysiajs](https://affpapa.org/en/nevibecode/skills/elysiajs.md) — skill · elysiajs · Claude Code, Codex, Cursor +3 · 14000 installs — This skill helps build, debug, and migrate Elysia v2 TypeScript backends.
- [exploiting-sql-injection-vulnerabilities](https://affpapa.org/en/nevibecode/skills/exploiting-sql-injection-vulnerabilities.md) — skill · mahipal · Claude Code, Codex, Cursor +3 · 504 installs — Guides SQL injection testing across web applications during authorized security assessments.
- [evaluating-code-models](https://affpapa.org/en/nevibecode/skills/evaluating-code-models.md) — skill · Orchestra Research · Claude Code, Codex, Cursor +3 · 953 installs — Runs code-model benchmarks and reports pass@k metrics.
- [dual-axis-skill-reviewer](https://affpapa.org/en/nevibecode/skills/dual-axis-skill-reviewer.md) — skill · tradermonty · Claude Code, Codex, Cursor +3 · 3300 installs — Reviews skills with deterministic checks and an LLM axis, then combines both into one score.
- [testability-obstacle](https://affpapa.org/en/nevibecode/skills/testability-obstacle.md) — skill · dotnet · Claude Code, Codex, Cursor +3 · 2500 installs — Adds the smallest production seam in C#/.NET code so a test stops depending on real time, files or randomness.
- [reproduce-and-fix-issues](https://affpapa.org/en/nevibecode/skills/reproduce-and-fix-issues.md) — skill · cursor · Claude Code, Codex, Cursor +3 · 822 installs — Recreates triaged Slack bugs in real UI via an app adapter and drafts fixes only after verified repros.
- [senior-qa](https://affpapa.org/en/nevibecode/skills/senior-qa.md) — skill · Alireza Rezvani · Claude Code · 1178 installs — This skill creates unit, integration, and E2E test stubs for React and Next.js.
- [nemo-evaluator-sdk](https://affpapa.org/en/nevibecode/skills/nemo-evaluator-sdk.md) — skill · Orchestra Research · Claude Code, Codex, Cursor +3 · 943 installs — This skill runs LLM evaluation across 100+ benchmarks from 18+ harnesses: MMLU, HumanEval, GSM8K, safety and VLM tasks.
- [phoenix-observability](https://affpapa.org/en/nevibecode/skills/phoenix-observability.md) — skill · Orchestra Research · Claude Code, Codex, Cursor +3 · 941 installs — This skill wires your agent into Phoenix, an open-source observability platform for LLM tracing, evaluation and production monitoring.
- [efficient-fable](https://affpapa.org/en/nevibecode/skills/efficient-fable.md) — skill · BuilderIO · Claude Code, Codex, Cursor +3 · 848 installs — Distributes work between Claude Fable and cheaper subagents.
- [testing-api-authentication-weaknesses](https://affpapa.org/en/nevibecode/skills/testing-api-authentication-weaknesses.md) — skill · mahipal · Claude Code, Codex, Cursor +3 · 484 installs — Tests REST API authentication for bypasses, broken JWT implementations, and unprotected endpoints.
- [impl-validator](https://affpapa.org/en/nevibecode/skills/impl-validator.md) — skill · Ar9av · Claude Code, Codex, Cursor +3 · 2200 installs — Independently checks whether finished work matches its stated goal and returns PASS, WARN or FAIL with a list of issues.
- [skill-integration-tester](https://affpapa.org/en/nevibecode/skills/skill-integration-tester.md) — skill · tradermonty · Claude Code, Codex, Cursor +3 · 3100 installs — Checks multi-skill workflows in CLAUDE.md for missing skills, JSON contract mismatches and file naming issues.
- [testing-cors-misconfiguration](https://affpapa.org/en/nevibecode/skills/testing-cors-misconfiguration.md) — skill · mahipal · Claude Code, Codex, Cursor +3 · 463 installs — Audits API endpoints for Cross-Origin Resource Sharing vulnerabilities during authorized penetration tests.
- [ios-memgraph-leaks](https://affpapa.org/en/nevibecode/skills/ios-memgraph-leaks.md) — skill (official OpenAI) · OpenAI · Codex, ChatGPT · 1054 installs — Captures and inspects iOS leaks from a simulator process or .memgraph.
- [ab-test-store-listing](https://affpapa.org/en/nevibecode/skills/ab-test-store-listing.md) — skill · appeeky · Claude Code, Codex, Cursor +3 · 3300 installs — Guides App Store listing A/B test design and analysis using Product Page Optimization and Custom Product Pages.
- [evaluating-cosmos-policy](https://affpapa.org/en/nevibecode/skills/evaluating-cosmos-policy.md) — skill · Orchestra Research · Claude Code, Codex, Cursor +3 · 858 installs — A skill for running NVIDIA Cosmos Policy evaluations on LIBERO and RoboCasa simulators and profiling inference latency.
- [iterate-pr](https://affpapa.org/en/nevibecode/skills/iterate-pr.md) — skill · getsentry · Claude Code, Codex, Cursor +3 · 4600 installs — Iterates on a pull request until actionable CI passes and review comments are fixed.
- [sqli-sql-injection](https://affpapa.org/en/nevibecode/skills/sqli-sql-injection.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 4000 installs — A playbook for SQL injection work: which payloads to try first, how to fingerprint the DBMS, and how to pull data blind.
- [rust-best-practices](https://affpapa.org/en/nevibecode/skills/rust-best-practices.md) — skill · apollographql · Claude Code, Codex, Cursor +3 · 21100 installs — A skill that feeds your agent Apollo GraphQL's Rust handbook: borrowing vs cloning, Result-based errors, Clippy lints, tests.
- [analyzing-ios-app-security-with-objection](https://affpapa.org/en/nevibecode/skills/analyzing-ios-app-security-with-objection.md) — skill · mahipal · Claude Code, Codex, Cursor +3 · 436 installs — A skill for runtime iOS app testing with Objection and Frida: dump the keychain, bypass SSL pinning, check jailbreak detection.
- [business-logic-vulnerabilities](https://affpapa.org/en/nevibecode/skills/business-logic-vulnerabilities.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3900 installs — A playbook for business logic bugs: race conditions, price tampering, workflow bypass, coupon abuse.
- [xss-cross-site-scripting](https://affpapa.org/en/nevibecode/skills/xss-cross-site-scripting.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3900 installs — A skill that feeds your coding agent non-obvious XSS vectors: context-specific payloads, WAF and CSP bypass.
- [testing-for-json-web-token-vulnerabilities](https://affpapa.org/en/nevibecode/skills/testing-for-json-web-token-vulnerabilities.md) — skill · mahipal · Claude Code, Codex, Cursor +3 · 431 installs — Guides coding agents through auditing JWT implementations for none-algorithm bypass, RS256-to-HS256 confusion, kid injection, and weak secrets.

Next: https://affpapa.org/en/nevibecode/skills/topic/testing.md?page=16

## Refine
[qa](https://affpapa.org/en/nevibecode/tag/qa.md) · [debugging](https://affpapa.org/en/nevibecode/tag/debugging.md) · [typescript](https://affpapa.org/en/nevibecode/tag/typescript.md) · [python](https://affpapa.org/en/nevibecode/tag/python.md) · [ci-cd](https://affpapa.org/en/nevibecode/tag/ci-cd.md) · [accessibility](https://affpapa.org/en/nevibecode/tag/accessibility.md) · [e2e](https://affpapa.org/en/nevibecode/tag/e2e.md) · [tdd](https://affpapa.org/en/nevibecode/tag/tdd.md) · [ios](https://affpapa.org/en/nevibecode/tag/ios.md) · [dotnet](https://affpapa.org/en/nevibecode/tag/dotnet.md) · [java](https://affpapa.org/en/nevibecode/tag/java.md) · [cli](https://affpapa.org/en/nevibecode/tag/cli.md)

## Narrow this list
Parameters: `?platform=<claude-code|codex|cursor|copilot|gemini-cli|windsurf|…>`, `&topic=<…>`, `&sort=installs|stars|new|updated` — values in https://affpapa.org/en/nevibecode/agents.md

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md
