# Skills for Testing and QA Skills for Testing and QA: what each one does, an install command and example prompts. 1762 cards · page 18 of 45 - HTML: https://affpapa.org/en/nevibecode/skills/topic/testing?page=18 - Instructions for agents: https://affpapa.org/en/nevibecode/agents.md - [perf-theory-tester](https://affpapa.org/en/nevibecode/skills/perf-theory-tester.md) — skill · composio-community · Claude Code, Codex, Cursor +3 · 1500 installs — A skill that keeps perf experiments honest: one change per hypothesis, repeated runs, a recorded verdict. - [perf-profiler](https://affpapa.org/en/nevibecode/skills/perf-profiler.md) — skill · composio-community · Claude Code, Codex, Cursor +3 · 1600 installs — Runs profilers against CPU and memory hot paths, captures flame graphs, and records file and line evidence. - [perf-benchmarker](https://affpapa.org/en/nevibecode/skills/perf-benchmarker.md) — skill · composio-community · Claude Code, Codex, Cursor +3 · 1600 installs — Runs benchmarks sequentially under strict duration rules to catch performance regressions and set baseline metrics. - [perf-analyzer](https://affpapa.org/en/nevibecode/skills/perf-analyzer.md) — skill · composio-community · Claude Code, Codex, Cursor +3 · 1600 installs — Turns profiling and experiment results into evidence-backed performance recommendations. - [testing-for-sensitive-data-exposure](https://affpapa.org/en/nevibecode/skills/testing-for-sensitive-data-exposure.md) — skill · mahipal · Claude Code, Codex, Cursor +3 · 356 installs — A skill that walks an agent through checks for leaked secrets, PII in API responses, and unencrypted data transmission. - [effect](https://affpapa.org/en/nevibecode/skills/effect.md) — skill · kitlangton · Claude Code, Codex, Cursor +3 · 2500 installs — A guide for building TypeScript applications with Effect v4, covering services, schemas, configuration, HTTP clients, streams, and tests. - [android-device-automation](https://affpapa.org/en/nevibecode/skills/android-device-automation.md) — skill · web-infra-dev · Claude Code, Codex, Cursor +3 · 5800 installs — This skill drives an Android device over ADB from screenshots: taps, swipes, text input, app launches. - [security-pen-testing](https://affpapa.org/en/nevibecode/skills/security-pen-testing.md) — skill · Alireza Rezvani · Claude Code · 834 installs — This skill guides vulnerability checks across web apps, APIs, and dependencies, from OWASP reviews to pen test reports. - [testing-oauth2-implementation-flaws](https://affpapa.org/en/nevibecode/skills/testing-oauth2-implementation-flaws.md) — skill · mahipal · Claude Code, Codex, Cursor +3 · 350 installs — A skill that probes OAuth 2.0 and OpenID Connect flows for code interception, redirect URI tricks, CSRF, token leakage and PKCE bypass. - [jira-expert](https://affpapa.org/en/nevibecode/skills/jira-expert.md) — skill · Alireza Rezvani · Claude Code · 823 installs — This skill helps with Jira project setup, JQL searches, workflows, automation, and reporting. - [quality-documentation-manager](https://affpapa.org/en/nevibecode/skills/quality-documentation-manager.md) — skill · Alireza Rezvani · Claude Code · 803 installs — This skill manages document control workflows for medical device QMS under ISO 13485 and 21 CFR Part 11. - [allium](https://affpapa.org/en/nevibecode/skills/allium.md) — skill · juxt · Claude Code, Codex, Cursor +3 · 3600 installs — Captures domain behaviour in .allium specs and drives a loop reconciling requirements, integration tests, and application code. - [capa-officer](https://affpapa.org/en/nevibecode/skills/capa-officer.md) — skill · Alireza Rezvani · Claude Code · 795 installs — Runs CAPA investigations for a medical device QMS: root cause analysis, corrective action planning, effectiveness verification. - [testing-for-business-logic-vulnerabilities](https://affpapa.org/en/nevibecode/skills/testing-for-business-logic-vulnerabilities.md) — skill · mahipal · Claude Code, Codex, Cursor +3 · 333 installs — This skill manually checks web app business logic with Burp Suite. - [ads-validate](https://affpapa.org/en/nevibecode/skills/ads-validate.md) — skill · AgriciDaniel · Claude Code, Codex, Cursor +3 · 602 installs — Runs validation over Claude Ads contracts, scoring inputs, run bundles and release readiness. - [run-acceptance-tests](https://affpapa.org/en/nevibecode/skills/run-acceptance-tests.md) — skill · hashicorp · Claude Code, Codex, Cursor +3 · 3700 installs — Runs and investigates Terraform provider acceptance tests with the TestAcc prefix. - [migrate-nunit-to-mstest](https://affpapa.org/en/nevibecode/skills/migrate-nunit-to-mstest.md) — skill · dotnet · Claude Code, Codex, Cursor +3 · 1700 installs — This skill moves .NET tests from NUnit 3/4 to MSTest v4 while keeping VSTest or MTP. - [quality-manager-qms-iso13485](https://affpapa.org/en/nevibecode/skills/quality-manager-qms-iso13485.md) — skill · Alireza Rezvani · Claude Code · 784 installs — Guides ISO 13485:2016 quality management system work for medical device organizations. - [testing-websocket-api-security](https://affpapa.org/en/nevibecode/skills/testing-websocket-api-security.md) — skill · mahipal · Claude Code, Codex, Cursor +3 · 328 installs — Audits WebSocket API security, checking upgrade handshake authentication, token validation, and CSWSH vulnerabilities. - [exploiting-sql-injection-with-sqlmap](https://affpapa.org/en/nevibecode/skills/exploiting-sql-injection-with-sqlmap.md) — skill · mahipal · Claude Code, Codex, Cursor +3 · 322 installs — Walks the agent through a sqlmap run: locate an injectable parameter, confirm it, pull data during an authorized pentest. - [caido-mode](https://affpapa.org/en/nevibecode/skills/caido-mode.md) — skill · caido · Claude Code, Codex, Cursor +3 · 2700 installs — Wires your agent into Caido: search HTTP history with HTTPQL, probe with proxied curl, and hand requests off as named Replay sessions. - [bypassing-authentication-with-forced-browsing](https://affpapa.org/en/nevibecode/skills/bypassing-authentication-with-forced-browsing.md) — skill · mahipal · Claude Code, Codex, Cursor +3 · 321 installs — A pentest skill that enumerates URLs to find unprotected pages, APIs and admin panels, then checks where authentication isn't enforced. - [testing-for-open-redirect-vulnerabilities](https://affpapa.org/en/nevibecode/skills/testing-for-open-redirect-vulnerabilities.md) — skill · mahipal · Claude Code, Codex, Cursor +3 · 318 installs — Checks URL redirect parameters and validation bypasses. - [convex-verify](https://affpapa.org/en/nevibecode/skills/convex-verify.md) — skill · convex · Claude Code, Codex, Cursor +3 · 35800 installs — convex-verify tests a Convex feature with seeded data, multiple mocked identities, and negative authorization checks. - [convex-test](https://affpapa.org/en/nevibecode/skills/convex-test.md) — skill · convex · Claude Code, Codex, Cursor +3 · 35900 installs — Generates deterministic vitest tests for Convex backend functions using convex-test. - [quality-manager-qmr](https://affpapa.org/en/nevibecode/skills/quality-manager-qmr.md) — skill · Alireza Rezvani · Claude Code · 747 installs — This skill supports QMR work under ISO 13485, from management reviews to quality KPI monitoring. - [qms-audit-expert](https://affpapa.org/en/nevibecode/skills/qms-audit-expert.md) — skill · Alireza Rezvani · Claude Code · 747 installs — A Claude Code skill that runs an ISO 13485 internal QMS audit from plan to CAPA check: risk-based schedule, evidence, finding classification. - [momentic-mobile-test](https://affpapa.org/en/nevibecode/skills/momentic-mobile-test.md) — skill · momentic-ai · Claude Code, Codex, Cursor +3 · 54300 installs — Create and check Momentic mobile E2E tests for Android and iOS. - [testing-for-xxe-injection-vulnerabilities](https://affpapa.org/en/nevibecode/skills/testing-for-xxe-injection-vulnerabilities.md) — skill · mahipal · Claude Code, Codex, Cursor +3 · 311 installs — A skill that walks the agent through XXE checks: reading server files, SSRF and data exfiltration during authorized penetration tests. - [ios-accessibility](https://affpapa.org/en/nevibecode/skills/ios-accessibility.md) — skill · dpearson2699 · Claude Code, Codex, Cursor +3 · 4900 installs — Guides accessibility reviews and code adjustments for Apple user interfaces. - [exploiting-api-injection-vulnerabilities](https://affpapa.org/en/nevibecode/skills/exploiting-api-injection-vulnerabilities.md) — skill · mahipal · Claude Code, Codex, Cursor +3 · 311 installs — Audits API parameters, headers, and request bodies for injection flaws like SQLi and SSRF. - [ui-screenshots](https://affpapa.org/en/nevibecode/skills/ui-screenshots.md) — skill (official GitHub) · github · GitHub Copilot · 209 installs — A skill that photographs web pages and desktop windows so the agent can document visual changes before and after a code edit. - [diagnose](https://affpapa.org/en/nevibecode/skills/diagnose.md) — skill (official GitHub) · github · GitHub Copilot · 209 installs — This skill audits an AI workflow across five dimensions and returns scores with prioritized fixes. - [web-browser](https://affpapa.org/en/nevibecode/skills/web-browser.md) — skill · mitsuhiko · Claude Code, Codex, Cursor +3 · 677 installs — Hands your agent a real Chrome: page navigation, clicks, form filling, screenshots, console and network inspection. - [browser-fingerprint-audit](https://affpapa.org/en/nevibecode/skills/browser-fingerprint-audit.md) — skill · liarjsdev · Claude Code, Codex, Cursor +3 · 102600 installs — Audits browser fingerprints for internal contradictions using the liarjs CLI. - [fingerprint-failure-triage](https://affpapa.org/en/nevibecode/skills/fingerprint-failure-triage.md) — skill · liarjsdev · Claude Code, Codex, Cursor +3 · 102400 installs — Reads a liarjs fingerprint report and names the component behind each failing check: launch config, page-modifying layer, network path or machine image. - [fingerprint-ci-gate](https://affpapa.org/en/nevibecode/skills/fingerprint-ci-gate.md) — skill · liarjsdev · Claude Code, Codex, Cursor +3 · 102500 installs — Catches browser fingerprint regressions in CI pipelines using liarjs. - [playwright-stealth-verify](https://affpapa.org/en/nevibecode/skills/playwright-stealth-verify.md) — skill · liarjsdev · Claude Code, Codex, Cursor +3 · 102500 installs — Checks whether an automated browser exposes a coherent fingerprint. - [testing-for-host-header-injection](https://affpapa.org/en/nevibecode/skills/testing-for-host-header-injection.md) — skill · mahipal · Claude Code, Codex, Cursor +3 · 306 installs — Tests web applications for HTTP Host header injection and related password reset, cache poisoning, SSRF, and virtual host routing risks. - [testing-for-xss-vulnerabilities-with-burpsuite](https://affpapa.org/en/nevibecode/skills/testing-for-xss-vulnerabilities-with-burpsuite.md) — skill · mahipal · Claude Code, Codex, Cursor +3 · 307 installs — Walks your agent through finding and confirming XSS in a web app, from site map to CSP bypass. Next: https://affpapa.org/en/nevibecode/skills/topic/testing.md?page=19 ## Refine [qa](https://affpapa.org/en/nevibecode/tag/qa.md) · [debugging](https://affpapa.org/en/nevibecode/tag/debugging.md) · [typescript](https://affpapa.org/en/nevibecode/tag/typescript.md) · [python](https://affpapa.org/en/nevibecode/tag/python.md) · [ci-cd](https://affpapa.org/en/nevibecode/tag/ci-cd.md) · [accessibility](https://affpapa.org/en/nevibecode/tag/accessibility.md) · [e2e](https://affpapa.org/en/nevibecode/tag/e2e.md) · [tdd](https://affpapa.org/en/nevibecode/tag/tdd.md) · [ios](https://affpapa.org/en/nevibecode/tag/ios.md) · [dotnet](https://affpapa.org/en/nevibecode/tag/dotnet.md) · [java](https://affpapa.org/en/nevibecode/tag/java.md) · [cli](https://affpapa.org/en/nevibecode/tag/cli.md) ## Narrow this list Parameters: `?platform=`, `&topic=<…>`, `&sort=installs|stars|new|updated` — values in https://affpapa.org/en/nevibecode/agents.md --- NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md