NeVibeCode · 1,630 items
Skills for Testing and QA
Skills for Testing and QA: what each one does, an install command and example prompts.
perf-theory-tester skill A skill that keeps perf experiments honest: one change per hypothesis, repeated runs, a recorded verdict. Useful when you need proof that an optimization helped.
CX Codex +1
1,500installs
perf-profiler skill Runs profilers against CPU and memory hot paths, captures flame graphs, and records file and line evidence.
CX Codex +1
1,600installs
perf-benchmarker skill Runs benchmarks sequentially under strict duration rules to catch performance regressions and set baseline metrics.
CX Codex +1
1,600installs
perf-analyzer skill Turns profiling and experiment results into evidence-backed performance recommendations. Use it when a decision needs a traceable basis.
CX Codex +1
1,600installs
testing-for-sensitive-data-exposure skill A skill that walks an agent through checks for leaked secrets, PII in API responses, and unencrypted data transmission. Useful during authorized pentests and data protection audits.
CX Codex +1
356installs
effect skill A guide for building TypeScript applications with Effect v4, covering services, schemas, configuration, HTTP clients, streams, and tests.
CX Codex +1
2,500installs
android-device-automation skill This skill drives an Android device over ADB from screenshots: taps, swipes, text input, app launches. Useful for checking a mobile app without clicking through it by hand.
CX Codex +1
5,800installs
security-pen-testing skill This skill guides vulnerability checks across web apps, APIs, and dependencies, from OWASP reviews to pen test reports. Use it for assessments you are authorized to perform.
834installs
testing-oauth2-implementation-flaws skill A skill that probes OAuth 2.0 and OpenID Connect flows for code interception, redirect URI tricks, CSRF, token leakage and PKCE bypass.
CX Codex +1
350installs
jira-expert skill This skill helps with Jira project setup, JQL searches, workflows, automation, and reporting. Use it when you want an agent to handle Jira configuration or find issues from a plain-language request.
823installs
quality-documentation-manager skill This skill manages document control workflows for medical device QMS under ISO 13485 and 21 CFR Part 11. It helps set up numbering conventions, approval flows, and change control.
803installs
allium skill Captures domain behaviour in .allium specs and drives a loop reconciling requirements, integration tests, and application code.
CX Codex +1
3,600installs
capa-officer skill Runs CAPA investigations for a medical device QMS: root cause analysis, corrective action planning, effectiveness verification. Useful when you are working a nonconformance or an audit finding.
795installs
testing-for-business-logic-vulnerabilities skill This skill manually checks web app business logic with Burp Suite. Use it to examine price changes, skipped workflow steps, privilege escalation, and race conditions.
CX Codex +1
333installs
ads-validate skill Runs validation over Claude Ads contracts, scoring inputs, run bundles and release readiness. Useful before a release and when something breaks.
CX Codex +1
602installs
run-acceptance-tests skill Runs and investigates Terraform provider acceptance tests with the TestAcc prefix. Use it for missing environment variables, failed runs, or tests that pass when they should not.
CX Codex +1
3,700installs
migrate-nunit-to-mstest skill This skill moves .NET tests from NUnit 3/4 to MSTest v4 while keeping VSTest or MTP. Use it for package, attribute, assertion, and lifecycle migration.
CX Codex +1
1,700installs
quality-manager-qms-iso13485 skill Guides ISO 13485:2016 quality management system work for medical device organizations. Use it to plan QMS implementation, prepare internal audits, and manage document control.
784installs
testing-websocket-api-security skill Audits WebSocket API security, checking upgrade handshake authentication, token validation, and CSWSH vulnerabilities. Useful during API security reviews.
CX Codex +1
328installs
exploiting-sql-injection-with-sqlmap skill Walks the agent through a sqlmap run: locate an injectable parameter, confirm it, pull data during an authorized pentest.
CX Codex +1
322installs
caido-mode skill Wires your agent into Caido: search HTTP history with HTTPQL, probe with proxied curl, and hand requests off as named Replay sessions.
CX Codex +1
2,700installs
bypassing-authentication-with-forced-browsing skill A pentest skill that enumerates URLs to find unprotected pages, APIs and admin panels, then checks where authentication isn't enforced.
CX Codex +1
321installs
testing-for-open-redirect-vulnerabilities skill Checks URL redirect parameters and validation bypasses. Use it when assessing login, OAuth, or SSO flows in systems you are authorized to test.
CX Codex +1
318installs
convex-verify skill convex-verify tests a Convex feature with seeded data, multiple mocked identities, and negative authorization checks. Use it for a specific feature you have built or changed.
CX Codex +1
35,800installs
convex-test skill Generates deterministic vitest tests for Convex backend functions using convex-test. Runs against an in-memory backend without live deployments.
CX Codex +1
35,900installs
quality-manager-qmr skill This skill supports QMR work under ISO 13485, from management reviews to quality KPI monitoring. Use it to organize evidence and document decisions.
747installs
qms-audit-expert skill A Claude Code skill that runs an ISO 13485 internal QMS audit from plan to CAPA check: risk-based schedule, evidence, finding classification.
747installs
momentic-mobile-test skill Create and check Momentic mobile E2E tests for Android and iOS. The skill is useful when editing test flows or validating them on a device.
CX Codex +1
54,300installs
testing-for-xxe-injection-vulnerabilities skill A skill that walks the agent through XXE checks: reading server files, SSRF and data exfiltration during authorized penetration tests.
CX Codex +1
311installs
ios-accessibility skill Guides accessibility reviews and code adjustments for Apple user interfaces. Helps configure screen reader flows, font scaling, and assistive focus states across devices.
CX Codex +1
4,900installs
exploiting-api-injection-vulnerabilities skill Audits API parameters, headers, and request bodies for injection flaws like SQLi and SSRF. Helps assess backend input validation against OWASP API standards.
CX Codex +1
311installs
ui-screenshots
official skill A skill that photographs web pages and desktop windows so the agent can document visual changes before and after a code edit.
209installs
diagnose
official skill This skill audits an AI workflow across five dimensions and returns scores with prioritized fixes. Use it before launch or after major workflow changes.
209installs
web-browser skill Hands your agent a real Chrome: page navigation, clicks, form filling, screenshots, console and network inspection. Useful when a live browser beats scraping HTML.
CX Codex +1
677installs
browser-fingerprint-audit skill Audits browser fingerprints for internal contradictions using the liarjs CLI. It spots mismatches between browser JavaScript APIs and edge network data.
CX Codex +1
102,600installs
fingerprint-failure-triage skill Reads a liarjs fingerprint report and names the component behind each failing check: launch config, page-modifying layer, network path or machine image.
CX Codex +1
102,400installs
fingerprint-ci-gate skill Catches browser fingerprint regressions in CI pipelines using liarjs. It compares runs against a baseline scan and halts builds when scores drop below a set threshold.
CX Codex +1
102,500installs
playwright-stealth-verify skill Checks whether an automated browser exposes a coherent fingerprint. Use it to measure headless settings or stealth-plugin changes in a test harness.
CX Codex +1
102,500installs
testing-for-host-header-injection skill Tests web applications for HTTP Host header injection and related password reset, cache poisoning, SSRF, and virtual host routing risks.
CX Codex +1
306installs
testing-for-xss-vulnerabilities-with-burpsuite skill Walks your agent through finding and confirming XSS in a web app, from site map to CSP bypass. Meant for authorized penetration tests.
CX Codex +1
307installs
681–720 of 1,630
