NeVibeCode · 1,630 items
Skills for Testing and QA
Skills for Testing and QA: what each one does, an install command and example prompts.
request-smuggling skill This skill tests HTTP desynchronization between front proxies and origin servers. Use it for CL.TE, TE.CL, HTTP/2-to-HTTP/1, and client-side desync checks.
CX Codex +1
3,600installs
file-access-vuln skill A routing skill for testing download endpoints, file paths, LFI and upload flows. It points the agent at the right topic skill.
CX Codex +1
3,600installs
xxe-xml-external-entity skill Guides your agent through XXE vulnerability auditing across XML, SVG, SOAP, and Office document parsing pipelines.
CX Codex +1
3,600installs
graphql-and-hidden-parameters skill A playbook for GraphQL and hidden parameter testing: introspection, batching, undocumented fields and authorization gaps.
CX Codex +1
3,600installs
ssti-server-side-template-injection skill An SSTI playbook: find server-side template injection, fingerprint the engine, and follow the chain to command execution.
CX Codex +1
3,600installs
cmdi-command-injection skill This skill helps find command injection where user input reaches shells, process execution, converters, import pipelines, or blind OOB sinks.
CX Codex +1
3,700installs
momentic-result-classification skill Reads failed Momentic runs through MCP, pinpoints the step where the run first went wrong, explains why, and files the verdict under a category.
CX Codex +1
68,500installs
momentic-test skill Guides coding agents in writing, running, and editing Momentic browser E2E tests in YAML format. Useful when building browser tests from natural language prompts.
CX Codex +1
68,500installs
release-checklist skill Generates a scoped pre-release verification checklist covering build health, QA bug thresholds, and storefront certification tracks.
CX Codex +1
443installs
milestone-review skill This skill reviews milestone progress, quality, risks, and go/no-go readiness. Use it at a checkpoint or before a deadline.
CX Codex +1
442installs
symmetric-cipher-attacks skill A playbook for attacking symmetric encryption: CBC padding oracle, ECB cut-and-paste, stream cipher key reuse. Built for CTFs and authorized testing.
CX Codex +1
3,500installs
prototype-pollution-advanced skill A playbook for advanced prototype pollution: server-side RCE through template engines, client-side gadgets, filter bypasses and detection.
CX Codex +1
3,500installs
xslt-injection skill This skill tests XSLT injection by fingerprinting the processor and checking XXE, document() SSRF, EXSLT, and platform extension surfaces.
CX Codex +1
3,600installs
qa-plan skill Generates a structured QA test plan for a sprint, feature, or story using game design docs and acceptance criteria. Distributes manual checks and automated tests before work begins.
CX Codex +1
438installs
team-polish skill This skill coordinates subagents to polish a game feature or area, covering performance, visuals, audio, and QA checks.
CX Codex +1
438installs
testing-api-for-mass-assignment-vulnerability skill Tests APIs for mass assignment by adding undocumented request fields and checking whether they persist. Use it for profile, registration, and object-creation endpoints.
CX Codex +1
385installs
neobrutalism skill This skill guides AI coding agents on neobrutalist UI with strong contrast, design tokens, component states, and accessibility checks.
CX Codex +1
2,500installs
hotfix skill This skill manages emergency hotfixes outside the normal sprint cycle, tracking approvals and enforcing QA gates before release.
CX Codex +1
432installs
upload-insecure-files skill Security testing playbook for file upload endpoints. It helps audit validation filters, storage path traversal, and background processing pipeline vulnerabilities.
CX Codex +1
3,500installs
bug-triage skill This skill re-evaluates open bugs, separates severity from priority, assigns fixes to sprints, and surfaces recurring system issues when the backlog grows.
CX Codex +1
422installs
content-audit skill Audits game design document content counts against implemented code. Helps teams track planned versus built assets and systems.
CX Codex +1
420installs
cafe skill This skill gives coding agents a cafe-inspired UI system with warm colors, soft type, and clear layout rules. Use it when interface guidance needs a defined foundation.
CX Codex +1
2,300installs
doodle skill This skill sets a playful doodle style for interface guidance with handwritten fonts, sketches, and imperfect lines. Use it when shaping a design system or UI guide.
CX Codex +1
2,400installs
smoke-check skill Runs automated tests and critical-path checks before a build goes to QA. It records a verdict and writes a smoke report after approval.
CX Codex +1
418installs
provider-resources skill This skill guides Terraform resource and data source work with the Plugin Framework. Use it when adding resources, handling drift, or reviewing provider code.
CX Codex +1
4,100installs
blast-radius skill Finds what a change breaks elsewhere, beyond the diff. Useful before a merge and when a brief asserts something about existing code.
CX Codex +1
889installs
create-verification-skill skill Generates a repo-local verification skill that exercises your application like a real user. Helpful when a codebase lacks automated scripts to prove UI, CLI, or API behavior.
CX Codex +1
890installs
regression-suite skill Maps test coverage to GDD critical paths, finds fixed bugs without regression tests, and flags coverage drift after new features.
CX Codex +1
415installs
day-one-patch skill Scopes a day-one patch for a shipped game after gold master: safe bugs only, a light QA pass, and a rollback plan before any code changes.
CX Codex +1
414installs
soak-test skill Builds an observation protocol for extended play sessions: what to watch and log to catch slow memory leaks and mechanic fatigue.
CX Codex +1
413installs
story-done skill Closes a finished story by verifying acceptance criteria, checking for GDD or ADR deviations, and updating sprint tracking files.
CX Codex +1
413installs
risk-management-specialist skill Implements ISO 14971:2019 risk management for medical devices across product lifecycles. It guides hazard analysis, 5x5 matrices, and risk control.
862installs
test-setup skill This skill sets up test infrastructure and CI with a tests directory, an engine test runner, and a GitHub Actions workflow. Use it before implementation starts.
CX Codex +1
411installs
exploiting-idor-vulnerabilities skill Guides authorized testing of IDOR vulnerabilities across API endpoints using Burp Suite, the Authorize extension, and curl scripts.
CX Codex +1
365installs
test-evidence-review skill This skill reviews test quality and story evidence beyond file existence or passing results. Use it before QA hand-off or a milestone audit.
CX Codex +1
410installs
skill-improve skill Runs one skill through a test → fix → retest loop and keeps the edit only when the score drops. Useful when a skill exists but the static test still complains.
CX Codex +1
410installs
test-flakiness skill Spots flaky tests from CI run logs, groups intermittent failures by cause, and updates quarantine lists in game projects.
CX Codex +1
408installs
skill-test skill Checks skill and agent files for structural compliance and stated behavior. Useful when reviewing project skills before they are used.
CX Codex +1
408installs
test-helpers skill Generates a test helper library for your engine: assertion utilities, factory functions, mocks. Useful when the same setup block keeps getting copied between test files.
CX Codex +1
405installs
perf-investigation-logger skill Appends structured performance investigation notes, quotes, and evidence to project logs. Keeps benchmarks and optimization decisions organized.
CX Codex +1
1,600installs
641–680 of 1,630
