NeVibeCode · 1,844 items
Skills for Testing and QA
Skills for Testing and QA: what each one does, an install command and example prompts.
ac-django skill A Django 6.1 and 5.2 LTS reference skill focusing on Fat Models, migrations, and security. Guides models, tests, queries, and DRF setup.
CX Codex +1
555installs
jackin-release-check skill Runs the jackin❯ release-readiness gates and reports a verdict for each one. Use it before cutting a release.
CX Codex +1
469installs
grade-iterate skill Phase 3 of building a Claude Managed Agent. Sets a rubric, reads each grader verdict and iterates until a version passes.
1installs
playwright-in-sandbox skill A skill that verifies UI changes in a sandbox browser and writes durable Playwright E2E coverage. Useful when you want screenshot proof, not just DOM state.
CX Codex +1
508installs
pentest-toolkit-pro-html skill A skill that tells the agent how to drive an offline pentest toolkit: OWASP WSTG checklists, finding tracking, CVSS scoring and a printable report. Handy when results must live in one file.
CX Codex +1
340installs
v8-xsd-fetch skill Downloads 1C XML export XSD schemas by format version into the project directory. Use it to inspect available versions or validate an export against its schema.
CX Codex
17installs
security-audit skill A workflow skill that walks a web app or API through recon, vulnerability scanning, pentesting, hardening and reporting.
673installs
orchestrate skill orchestrate coordinates a feature split across GitHub sub-issues, assigning /implement agents and handling review, CI, merges, and cleanup.
CX Codex +1
651installs
qa skill Runs a conversational bug reporting session, investigates repository terminology in the background, and posts GitHub issues via gh.
CX Codex +1
649installs
sql-injection-testing skill A skill that walks an agent through SQL injection testing on web apps: spotting injectable parameters, confirming the flaw, and getting past filters. Meant for pentests you are authorized to run.
605installs
playwright-interactive-sandbox skill This skill runs iterative web UI checks through a persistent Node.js Playwright workflow. Use it for functional checks, visual QA, and screenshot evidence.
CX Codex +1
400installs
babysit-pr skill Monitors a pull request until ready to merge by handling CI checks, addressing review items, and pushing code fixes.
CX Codex +1
540installs
verify skill Defines a single source of truth for gate checks across git hooks and CI. Keeps local pre-push checks and pull request pipelines aligned.
CX Codex +1
536installs
nodejs-best-practices skill This skill guides Node.js framework, async, architecture, and security choices from project context. Use it when planning or reviewing a Node.js codebase.
501installs
web-exfiltration-detection skill This skill tests whether an agent can be coaxed into exposing memory through a chain of web navigation. Use it when the agent fetches pages and retains personal context.
CX Codex +1
★ 7,121repo stars
tool-abuse-detection skill Runs dialogue probes against an agent to catch command execution, out-of-scope file reads and SSRF. Useful when the agent holds file, code or network tools.
CX Codex +1
★ 7,121repo stars
memory-rag-poisoning-detection skill This skill tests whether an agent stores hostile instructions in memory or a knowledge base and follows them in later conversations.
CX Codex +1
★ 7,121repo stars
human-agent-trust-exploit-detection skill This skill checks whether an agent solicits secrets, gives misleading safety claims, or pushes users toward risky actions. Use it for dialogue-based security checks.
CX Codex +1
★ 7,121repo stars
direct-injection-detection skill Tests whether a user message can override system or developer instructions. Use it to check an AI agent for direct prompt injection.
CX Codex +1
★ 7,121repo stars
data-leakage-detection skill A skill that runs escalating dialogue probes against an agent to surface leaked system prompts, credentials, PII and internal config.
CX Codex +1
★ 7,121repo stars
authorization-bypass-detection skill This skill probes an agent for access to other users’ data and actions beyond the caller’s permissions. Use it when an agent handles roles, user data, or admin functions.
CX Codex +1
★ 7,121repo stars
setup skill This skill detects the project’s test framework, installs the matching TDD Guard reporter, and configures or updates it. Use it for setup or migration.
CX Codex +1
★ 2,366repo stars
dtcg-tokens skill Turn multimodal source material into DTCG tokens, evidence data, and an HTML proof artifact. Use it when token choices need to trace back to inspectable source material and pass visual review.
CX Codex +1
303installs
assess-patch-risk
official skill This skill examines a fixed patch artifact to assess its program impact, regression exposure, and case for automatic merging. Use it when reviewing proposed changes.
CX Codex GP ChatGPT
★ 7,604repo stars
circleci-config
official skill This skill reviews CircleCI configuration and suggests ways to cut pipeline waste, adjust caching, and address slow jobs. Use it when CI runs drag on or pipeline behavior is flaky.
CX Codex GP ChatGPT
★ 7,604repo stars
circleci-builds
official skill This skill investigates failed CircleCI jobs, traces likely root causes, and guides small fixes. Use it when a build, test, or pipeline step breaks.
CX Codex GP ChatGPT
★ 7,604repo stars
python-pro skill A Claude skill that steers Python 3.12+ development: async patterns, typing, profiling, plus uv, ruff, pydantic and FastAPI.
399installs
agent-evaluation skill Evaluate an agent’s behavior, capabilities, and consistency across runs. Use the skill when you need to test an agent beyond a single benchmark result.
378installs
testing-patterns skill A Claude skill that hands the agent Jest testing patterns: data factories, module mocks and the red-green-refactor loop.
365installs
code-review-checklist skill A skill that walks a reviewer through context, functionality, quality, security, performance and tests. Useful on pull requests and audits.
365installs
dogfood skill This skill explores a web app, checks its interface and behaviour, and creates a report with evidence for each issue. Use it for exploratory QA of a site or service.
CX Codex +1
★ 8,227repo stars
develop-web-game skill This skill lays out a development and testing loop for HTML and JavaScript games. Use it while adding game features and checking each meaningful change in a browser.
342installs
pentest-checklist skill A skill that walks you through pentest planning: objectives, scope, environment prep, tester selection and monitoring. Useful before a security assessment.
336installs
azure-microsoft-playwright-testing-ts skill A skill that wires Playwright tests to Azure Playwright Workspaces, so browser runs happen on cloud browsers and land in the Azure portal.
3installs
accessibility skill This skill guides Claude Code through web accessibility reviews based on WCAG 2.1. Use it to inspect keyboard access, screen reader support, and interface elements.
325installs
maintain-cross-platform skill Guides AgentSys maintainers to the code and checks behind cross-platform changes. Use it when preparing a release or changing the installer, transforms, or adapters.
CX Codex +1
★ 1,007repo stars
vibe-verify skill This skill exercises a running product against acceptance criteria and reports evidence. A passing build on its own proves nothing about behavior.
CX Codex +1
★ 3,191repo stars
vibe-review skill vibe-review checks proposed changes against requirements, regressions, verification evidence, and security concerns before they move forward.
CX Codex +1
★ 3,191repo stars
vibe-debug skill A skill that walks an agent through a reproducible failure in an existing project: crashes, broken behavior, failing checks. Not for greenfield planning.
CX Codex +1
★ 3,191repo stars
vibe-build skill This skill takes a new-project slice from the brief to a working user journey and relevant checks. Use it when a passing build alone is not enough.
CX Codex +1
★ 3,191repo stars
1,721–1,760 of 1,844
