Test design, vulnerability assessment, and quality assurance (13.8K skills)
Give Claude Code, Codex, Cursor, ChatGPT and other MCP clients 1,000+ apps and 400+ expert-built Skills through one reusable Aident Loadout setup, with credentials kept in Aident Vault and every action recorded in Audit.
The English summary is being prepared. Showing the original description.
Browsertrix Crawler is a browser-based crawling system from Webrecorder for high-fidelity site capture, QA replay analysis, and configurable crawl behavior. It runs complex crawls in a single Docker container and uses Puppeteer plus Chrome DevTools Protocol under the hood.
The English summary is being prepared. Showing the original description.
Index local coding-agent sessions into a searchable SQLite-backed view so you can inspect usage, compare failures, and recover prior context quickly.
The English summary is being prepared. Showing the original description.
Turns a plain-language idea into a tested Chrome Manifest V3 extension, release bundle, store materials, and a resumable launch workflow using Codex skills and Playwright MCP acceptance checks.
The English summary is being prepared. Showing the original description.
Use Google Agent Development Kit to define, test, evaluate, and deploy code-first Python agents with tools, sessions, HITL confirmation, and multi-agent orchestration.
The English summary is being prepared. Showing the original description.
Bruno is an open-source, offline-first API client that stores collections as plain-text .bru files on your filesystem. It serves as a privacy-focused, git-friendly alternative to Postman and Insomnia with no cloud sync and no account required.
The English summary is being prepared. Showing the original description.
Scan a repository for secrets, keep an auditable baseline, and review only newly introduced findings during commits or CI checks.
The English summary is being prepared. Showing the original description.
BackstopJS gives agents a repeatable way to capture reference screenshots, compare UI states, and flag visual regressions before changes ship. This skill centers on the real BackstopJS project and turns browser-based layout comparison into a structured QA workflow for web teams.
The English summary is being prepared. Showing the original description.
Uses mitmproxy2swagger to turn captured mitmproxy flows or HAR exports into a first-pass OpenAPI document that an agent can refine, validate, and hand off to downstream tooling. Invoke it when the API already exists but the contract does not, and you need a concrete spec before generating clients, mocks, tests, or reviewable docs.
The English summary is being prepared. Showing the original description.
Bearer CLI is an open-source static application security testing (SAST) tool that scans source code to identify, filter, and prioritize security vulnerabilities and privacy risks. Covers OWASP Top 10 and CWE Top 25 with data flow analysis across multiple languages.
The English summary is being prepared. Showing the original description.
A fast, configurable secrets scanner built by the creator of Gitleaks and backed by Aikido Security. Betterleaks detects leaked passwords, API keys, and tokens in git repositories, directories, and stdin with CEL-based validation and parallelized scanning.
The English summary is being prepared. Showing the original description.
Add a runtime guard that evaluates agent actions, blocks dangerous commands or secret exposure, and audits new skills before they run.
The English summary is being prepared. Showing the original description.
Run a repeatable evaluation suite for browser agents against static web task snapshots instead of judging them from demos or one-off tests.
The English summary is being prepared. Showing the original description.
Run concurrent scripted conversations against a target agent to measure whether it stays on task, responds correctly, and holds up in repeatable test cases.
The English summary is being prepared. Showing the original description.
Add controlled retries to pytest runs so agents can contain flaky tests and report final failures without rerunning whole suites by hand.
The English summary is being prepared. Showing the original description.
Uses boto3 and the AWS IAM Access Analyzer API to enumerate all roles, policies, and users, then flags permission combinations that could allow privilege escalation to AdministratorAccess. Outputs findings mapped to MITRE ATT&CK TA0004 with remediation steps and least-privilege replacement policy JSON.
The English summary is being prepared. Showing the original description.
Use Agent QA's CLI and MCP server to author, validate, run, debug, and triage natural-language web and mobile regression tests with persistent test memory and reviewable run evidence.
The English summary is being prepared. Showing the original description.
axe-core is the industry-standard accessibility testing engine by Deque Systems that automatically detects WCAG 2.0, 2.1, and 2.2 violations in web interfaces. It integrates into any existing test framework — Playwright, Cypress, Selenium, Jest — to catch accessibility issues during development rather than after deployment.
The English summary is being prepared. Showing the original description.
Use GEO SEO Claude when Claude Code should run repeatable AI-search and SEO audits with citability, crawler, schema, platform, and report workflows.
The English summary is being prepared. Showing the original description.
Check Python environments and requirements files for published vulnerabilities before shipping, upgrading, or approving dependency changes.
The English summary is being prepared. Showing the original description.
This skill uses OpenClaw's healthcheck workflow to inspect the host running the assistant, surface risky exposure, and turn the findings into a staged hardening plan. It is for operator-style audits with explicit approval gates, not a generic software listing or a replacement for OS administration.
The English summary is being prepared. Showing the original description.
Use Deptry when an agent needs to verify that a Python project's declared dependencies still match the imports the code actually uses. The agent scans the codebase, flags unused direct dependencies, missing declarations, and transitive imports that only work by accident, then turns the findings into cleanup commits or release blockers.
The English summary is being prepared. Showing the original description.
Scan Python requirements and environments for known vulnerable or malicious packages before they move further through delivery or promotion workflows.
The English summary is being prepared. Showing the original description.
Inspect an SSH endpoint or config for outdated ciphers, key exchange choices, and hardening gaps before exposure or upgrades.
The English summary is being prepared. Showing the original description.