Skip to content
cccskills

Testing & Security skills

Test design, vulnerability assessment, and quality assurance (13K skills)

Filter by price or sort order

reflect

FreeSummary

Review a previous answer or deliverable for completeness, correctness, risks and opportunities to improve it. The skill adjusts review depth to task complexity, checks claims and dependencies, and turns identified issues into prioritized, actionable refinements.

  • Checking a draft answer for gaps and unclear claims
  • Reviewing code for risks and missing verification
  • Prioritizing improvements to a complex implementation
NeoLabHQ/context-engineering-kit1.8KUpdated Aug 27, 2026

Choose a testing strategy based on an artifact’s behavior, risk, and deployment context. The guide uses decision gates to select test types, then helps shape dependencies and concrete test cases with examples and structured output.

  • Choose test types for a code change
  • Decide when to skip low-value tests
  • Turn acceptance criteria into test cases
NeoLabHQ/context-engineering-kit1.8KUpdated Aug 27, 2026

fix-tests

FreeSummary

Use this skill after business logic changes, refactoring, or dependency updates to identify failing tests and coordinate repairs. It aims to keep tests aligned with the current implementation while preserving their original purpose and checking the full suite again.

  • Fix tests after a refactor
  • Update outdated test expectations
  • Repair test setup or mocks
NeoLabHQ/context-engineering-kit1.8KUpdated Aug 27, 2026

Evaluate a solution with three independent judges using shared criteria prepared for the task. They compare evidence, challenge differing scores, and revise their assessments over up to three debate rounds, producing a consensus report or a summary of unresolved disagreements for human review.

  • Comparing independent reviews of an API implementation
  • Evaluating a solution against task-specific criteria
  • Resolving scoring disagreements through evidence-based debate
NeoLabHQ/context-engineering-kit1.8KUpdated Aug 27, 2026

wooyun-legacy

FreeSummary

Apply a methodology based on public WooYun vulnerability cases to assess business logic in web apps, APIs, and business systems. Map workflows and trust boundaries, form domain-specific hypotheses, perform targeted manual checks, and document evidence, business impact, and remediation.

  • Planning a manual security review of an API
  • Checking payment and order workflows for logic flaws
  • Assessing authorization boundaries between users
tanweai/wooyun-legacy1.8KUpdated Jul 14, 2026

audit

FreeSummary

Audit an AIOS by checking how it retrieves information, connects to tools and data, performs key workflows, and runs scheduled work. The skill scores evidence of operational reliability and saves a dated report with prioritized findings and practical improvement checks.

  • Checking whether project information routes work
  • Reviewing Claude and Codex skill compatibility
  • Assessing evidence for scheduled workflows
nateherkai/AIS-OS1.8KUpdated Sep 7, 2026

Finds the price buyers will actually pay. Reads the consumer panel's four price answers per buyer into a Van Westendorp price-sensitivity range (too cheap, a bargain, getting expensive, too expensive), sets it against what competitors really charge and against the CFO's margin, and recommends a price, a price ladder (good / better / best) and an opening offer to test. Use when the user says "how much should I charge", "price this", "is $X too expensive", "pricing strategy", "what price", or after the consumer panel.

The English summary is being prepared. Showing the original description.

Jakeschincariol/founder-skill1.7KUpdated Oct 7, 2026

Your board of directors. Puts a business idea in front of a three-member board, each a sub-agent reading the idea through one published framework: the Offers lens (from Alex Hormozi's $100M Offers), the Monopoly lens (from Peter Thiel's Zero to One) and the Product lens (from Walter Isaacson's biography of Steve Jobs). Each member scores the idea, names the risks that would kill it and votes fund, fund with conditions, or pass. Use when the user says "test my business idea", "would this work", "pressure-test this", "what would a board say", "is this a good business", or starts the founder pack on a new idea.

The English summary is being prepared. Showing the original description.

Jakeschincariol/founder-skill1.7KUpdated Oct 7, 2026

The consumer panel. Spins up a swarm of buyer sub-agents (default 100, --quick for 20) trained on the user's target customer, each with a different income, age, buying behaviour and objection, shows every one the same pitch, and runs the business through 100 buyer scenarios to see who buys, who doesn't, and why. Tallies the answers into buy rates by segment, the reasons people pass in their own words, what would flip a no, and price answers for founder-pricing. Use when the user says "would people buy this", "test it on customers", "run the consumer panel", "simulate buyers", "who is my customer", or "validate demand".

The English summary is being prepared. Showing the original description.

Jakeschincariol/founder-skill1.7KUpdated Oct 7, 2026

Your launch lead. Builds a dated, step-by-step launch plan: a cheap real-world test first (a waitlist, a pre-sale or a pop-up with a real price, so real buyers confirm what the simulated panel said), then the countdown to opening day with owners and deadlines, the launch-day run sheet, and the first 30 days of what to measure and what to change. Use when the user says "how do I launch", "launch plan", "when can I open", "launch checklist", "go live", or "soft open".

The English summary is being prepared. Showing the original description.

Jakeschincariol/founder-skill1.7KUpdated Oct 7, 2026

Builds an offer too good to refuse. Lists every problem the buyer hits on the way to the result they want, turns each into a solution, trims to what is cheap to deliver and valuable to the buyer, and stacks it with honest bonuses, a guarantee the CFO can afford, real urgency and a clear name. Scores it on the value equation (outcome, likelihood, time, effort) and re-tests it on a quick buyer panel. Use when the user says "make my offer better", "why won't people buy", "what should I include", "guarantee", "bonuses", "grand slam offer", or after the panel shows people passing.

The English summary is being prepared. Showing the original description.

Jakeschincariol/founder-skill1.7KUpdated Oct 7, 2026

Systematically explore and test a mobile app on iOS/Android with agent-device to find bugs, UX issues, and other problems. Use when asked to "dogfood", "QA", "exploratory test", "find issues", "bug hunt", or "test this app" on mobile. Produces a structured report with reproducible evidence: screenshots, optional repro videos, and detailed steps for every issue.

The English summary is being prepared. Showing the original description.

callstackincubator/agent-skills1.7KUpdated Oct 9, 2026

Write tests using React Native Testing Library (RNTL) v13 and v14 (`@testing-library/react-native`). Use when writing, reviewing, or fixing React Native component tests. Covers: render, screen, queries (getBy/getAllBy/queryBy/findBy), Jest matchers, userEvent, fireEvent, waitFor, and async patterns. Supports v13 (React 18, sync render) and v14 (React 19+, async render). Triggers on: test files for React Native components, RNTL imports, mentions of "testing library", "write tests", "component tests", or "RNTL".

The English summary is being prepared. Showing the original description.

callstackincubator/agent-skills1.7KUpdated Oct 9, 2026

Use when a test fails and you need to diagnose the root cause. Run the test, read errors, trace through generated and source code, fix, and verify.

The English summary is being prepared. Showing the original description.

MorphiaOrg/morphia1.7KUpdated Oct 23, 2026

Build and test the Morphia project using Maven. Use when compiling, running tests, or building artifacts.

The English summary is being prepared. Showing the original description.

MorphiaOrg/morphia1.7KUpdated Oct 23, 2026

Generate cloned narration for the content workspace. Use local IndexTTS2 with the canonical lossless Pluviobyte reference for every local video, voice audition, digital-human narration, and subtitle-ready audio render. Preserve MiniMax only for public-facing articles or tutorials that teach users to connect through the relay service; never use MiniMax for local video production.

The English summary is being prepared. Showing the original description.

Pluviobyte/rnskill1.7KUpdated Sep 21, 2026

dontbesilent 目标清晰化。用维特根斯坦的语言哲学把模糊的目标审计成可检查的交付物。 触发方式:/dbs-goal、/目标、「帮我搞清楚目标」「我想做个人 IP」「我的目标是成为...」「我想变得更...」 Goal clarification using Wittgenstein's philosophy of language. Audits fuzzy goals into checkable deliverables. Trigger: /dbs-goal, "help me clarify my goal", "I want to become...", "my goal is..."

The English summary is being prepared. Showing the original description.

Pluviobyte/rnskill1.7KUpdated Sep 21, 2026

Agent 工作台迁移。把任意项目整理成 Claude Code / Codex / Grok 三端一致、可长期维护的 Agent 工作台:审计规则文件、识别真源、统一命名并生成 bridge。 触发方式:/dbs-agent-migration、/agent迁移、「迁移到 Codex」「迁移到 Claude Code」「迁移到 Grok」「统一 AGENTS.md」「整理 skill bridge」「我的 Agent 工作台很乱」「帮我统一 Claude 和 Codex 和 Grok」 Agent workspace migration. Turn any project into a maintainable Claude Code / Codex / Grok three-host workspace by auditing rule files, establishing source-of-truth skills, normalizing names, and generating bridges. Trigger: /dbs-agent-migration, /agent-migration, "migrate to Codex", "migrate to Claude Code", "migrate to Grok", "fix AGENTS.md", "organize skill bridges"

The English summary is being prepared. Showing the original description.

Pluviobyte/rnskill1.7KUpdated Sep 21, 2026

dontbesilent 内容结构化系统。把本地大量文稿、推文、选题、案例和课程稿搭成一个可持续生长的内容结构化工程:先审计内容规模与边界,再建立新工程、复制素材、抽取内容单元、生成主题地图与选题装配稿。 触发方式:/dbs-content-system、/内容结构化系统、「把我的内容做成结构化系统」「把本地素材变成可重组系统」「帮我搭内容资产工程」「我想把旧内容变成可复用资产」 Content structuring system. Audits local content volume, then builds a reusable content knowledge project with units, topic maps, and assembly drafts. Trigger: /dbs-content-system, "build a content structuring system", "turn my archive into reusable assets"

The English summary is being prepared. Showing the original description.

Pluviobyte/rnskill1.7KUpdated Sep 21, 2026

When a real test is too rare, large, or irreversible, run a controlled counterfactual: isolate one variable, fix conditions, trace the mechanistic chain, and bound what the result implies.

The English summary is being prepared. Showing the original description.

tjboudreaux/cc-thinking-skills1.7KUpdated Aug 8, 2026

When a claim, doc, test, metric, or assumption conflicts with observed behavior, stop theorizing from the map and verify the live code or data; let territory overrule.

The English summary is being prepared. Showing the original description.

tjboudreaux/cc-thinking-skills1.7KUpdated Aug 8, 2026

For authorized security review of code, auth, or APIs you control, model the attacker, map the attack surface, and report only findings with a reproducible exploit path and verified mitigation.

The English summary is being prepared. Showing the original description.

tjboudreaux/cc-thinking-skills1.7KUpdated Aug 8, 2026

Prove that the file you are about to send, publish, or hand off IS the thing you mean — before it leaves your hands. Rebuild from source, check integrity, diff the derived artifact against its source, and require the recipient to echo what they received. Use before sending a paper/PDF for review, shipping a release or replication package, handing files to a coauthor or collaborator, uploading anything to an external reviewer or model, or publishing. Prevents an entire review/QA cycle from being spent on defects that exist only in the artifact, not in the work.

The English summary is being prepared. Showing the original description.

pedrohcgs/claude-code-my-workflow1.7KUpdated Sep 28, 2026

Extract a written voice profile from your own prior papers, then use it to keep new drafts sounding like you. Reads a corpus one document at a time via subagents, produces a reusable profile on disk (lexicon, sentence rhythm, how you open and close, hedging habits, deliberate quirks), and audits a draft against it. Use when the user says "make this sound like me", "match my voice", "profile my writing", "why does this draft not sound like my papers", or before drafting prose that will carry their name. The positive counterpart to /humanize, which only detects AI tells.

The English summary is being prepared. Showing the original description.

pedrohcgs/claude-code-my-workflow1.7KUpdated Sep 28, 2026