Test design, vulnerability assessment, and quality assurance (13.8K skills)
Bearer CLI is an open-source static application security testing (SAST) tool that scans source code to identify, filter, and prioritize security vulnerabilities and privacy risks. Covers OWASP Top 10 and CWE Top 25 with data flow analysis across multiple languages.
The English summary is being prepared. Showing the original description.
Scan a repository for secrets, keep an auditable baseline, and review only newly introduced findings during commits or CI checks.
The English summary is being prepared. Showing the original description.
A fast, configurable secrets scanner built by the creator of Gitleaks and backed by Aikido Security. Betterleaks detects leaked passwords, API keys, and tokens in git repositories, directories, and stdin with CEL-based validation and parallelized scanning.
The English summary is being prepared. Showing the original description.
Check Python environments and requirements files for published vulnerabilities before shipping, upgrading, or approving dependency changes.
The English summary is being prepared. Showing the original description.
Inspect an SSH endpoint or config for outdated ciphers, key exchange choices, and hardening gaps before exposure or upgrades.
The English summary is being prepared. Showing the original description.
Add controlled retries to pytest runs so agents can contain flaky tests and report final failures without rerunning whole suites by hand.
The English summary is being prepared. Showing the original description.
Use Deptry when an agent needs to verify that a Python project's declared dependencies still match the imports the code actually uses. The agent scans the codebase, flags unused direct dependencies, missing declarations, and transitive imports that only work by accident, then turns the findings into cleanup commits or release blockers.
The English summary is being prepared. Showing the original description.
Scan Python requirements and environments for known vulnerable or malicious packages before they move further through delivery or promotion workflows.
The English summary is being prepared. Showing the original description.
axe-core is the industry-standard accessibility testing engine by Deque Systems that automatically detects WCAG 2.0, 2.1, and 2.2 violations in web interfaces. It integrates into any existing test framework — Playwright, Cypress, Selenium, Jest — to catch accessibility issues during development rather than after deployment.
The English summary is being prepared. Showing the original description.
This skill uses OpenClaw's healthcheck workflow to inspect the host running the assistant, surface risky exposure, and turn the findings into a staged hardening plan. It is for operator-style audits with explicit approval gates, not a generic software listing or a replacement for OS administration.
The English summary is being prepared. Showing the original description.
Uses boto3 and the AWS IAM Access Analyzer API to enumerate all roles, policies, and users, then flags permission combinations that could allow privilege escalation to AdministratorAccess. Outputs findings mapped to MITRE ATT&CK TA0004 with remediation steps and least-privilege replacement policy JSON.
The English summary is being prepared. Showing the original description.
Use GEO SEO Claude when Claude Code should run repeatable AI-search and SEO audits with citability, crawler, schema, platform, and report workflows.
The English summary is being prepared. Showing the original description.
Use Agent QA's CLI and MCP server to author, validate, run, debug, and triage natural-language web and mobile regression tests with persistent test memory and reviewable run evidence.
The English summary is being prepared. Showing the original description.
Run targeted AWS, Azure, or GCP security and compliance audits when an agent needs actionable cloud findings instead of a generic cloud-security platform overview.
The English summary is being prepared. Showing the original description.
Use Retentioneering's Python toolkit, MCP server, and agent skills to run reproducible customer-journey and event-log analytics that agents can validate and cross-check.
The English summary is being prepared. Showing the original description.
Use REUSE when an agent needs file-level licensing clarity instead of guessing from a single top-level LICENSE file. The agent checks compliance, adds or verifies SPDX headers, pulls missing license texts into LICENSES/, and produces a concrete remediation list or SPDX export.
The English summary is being prepared. Showing the original description.
Use Chops to discover, search, edit, and organize local or remote agent skills across Claude Code, Cursor, Codex, Windsurf, Amp, Copilot, and Aider.
The English summary is being prepared. Showing the original description.
Run a repeatable HIG compliance audit over app code before shipping UI changes, then use the findings to guide remediation.
The English summary is being prepared. Showing the original description.
Use Cloudsplaining when an agent needs to flag privilege-escalation paths and overbroad IAM permissions before an AWS policy change reaches production.
The English summary is being prepared. Showing the original description.
Run a focused security pass on GitHub Actions workflows before merge so token misuse, dangerous permissions, and unpinned actions are caught early.
The English summary is being prepared. Showing the original description.
Use Avoid AI Writing when an agent needs a repeatable audit, rewrite, or in-place edit workflow for removing AI writing patterns from draft prose.
The English summary is being prepared. Showing the original description.
Uses Lynis to run an on-host security audit and turn the findings into a prioritized hardening checklist for an agent or operator. Invoke it when a machine is about to become internet-facing, after base image changes, or whenever you need a quick read on hardening drift instead of a generic vulnerability scan.
The English summary is being prepared. Showing the original description.
Produce a license inventory for Go module dependencies before release, procurement review, or open-source due diligence.
The English summary is being prepared. Showing the original description.
Use HarnessKit to inventory, audit, enable, disable, and deploy skills, MCP servers, plugins, hooks, CLIs, configs, memory, and rules across multiple coding agents.
The English summary is being prepared. Showing the original description.