13.1K skills · sorted by popularity
Create a fixed JSON evaluation suite from a repository's existing tests and check its structure for errors. Use the suite with harness-evolve to compare variants against consistent tasks, independently of the repository's normal test command.
Review pending database migration SQL before applying schema changes. Check references between tables, rollback coverage, required defaults, destructive operations, and naming conventions, then report errors, warnings, and suggestions with file paths and line numbers.
Run three static audits covering architecture alignment, threats, and MCP server policies, permissions, and dependencies. Store timestamped results, track changes across runs, and fail scheduled CI jobs when findings reach a chosen severity.
Review audit logs from agent federation, a system for connecting agents. Filter events by compliance mode, date, and severity, then summarize personal information detections, blocked threats, trust changes, and critical or error events.
Compare saved benchmark runs over time to track win rate, response times, escalation rate, and LLM baseline costs. Review changes between the first and latest runs, with flags for declining win rates or rising average latency.
Compare a saved repository audit with a fresh audit in one command. Receive a structured report showing structural similarity, with an alert and exit code when similarity falls below your chosen threshold.
Benchmark security detection systems against 10 known vulnerabilities and nine harmless decoys. Compare four approaches, including an evolved champion, and receive structured JSON covering detection, false alarms, patch tests, reproduction, unsafe outputs, and overall pass or fail.
Generate a read-only security report on threats involving MCP connections and operations. It groups findings by threat, reports the highest severity, and supports table or JSON output with a configurable severity threshold for failure.
Scan declared MCP servers and tools for permission, policy, and dependency issues without executing them. Produce JSON or a Markdown table, and set a severity threshold that determines whether a CI check fails.
Track documented code fixes across releases with a signed manifest, a list of fixes and their identifying text. Verify that markers remain in source files, inspect file changes, and use recorded history to identify commits associated with regressions.
Compare two recorded browser sessions at matching step IDs using screenshots and accessibility snapshots, which describe page elements. Report the first difference and overall similarity to check interface changes or verify replayed sessions.
Run a prepared set of test cases to check agent-booster success rates and routing decisions. Optionally compare results with Gemini or Claude models, then save detailed measurements and summaries as JSON records for later verification.
Check text, code, and configuration files for personal information and secrets before committing, logging, storing, or sending them. Identify categorized findings, flag their locations, and suggest redaction to hide sensitive details.
Check untrusted text before passing it to a model or executing it. Using AIDefence, it provides safety checks, detailed threat classifications, confidence scores, and scanning for attempts to override instructions or extract data.
Inspect a site's login flow for token leaks, missing protections against forged requests, exposed session cookies, and OAuth configuration issues. Produce a structured findings report with severity ratings and a pass, warn, or fail verdict.
Test interface behavior in a real browser and save actions, checks, and screenshots in a replayable RVF session file. Use recorded sessions to repeat tests, investigate CI failures, and compare screenshots against an earlier baseline.
Replay recorded browser actions on the original or an alternative URL to check UI changes or reproduce bugs. When a page element cannot be found, the skill searches for a similar target and records how many steps succeeded.
Assess code change risk, locate complex areas, and inspect file statistics with ruflo analysis commands. The skill also guides running and extending ruflo’s regression guards, automated checks that help catch previously fixed problems.
Measure performance in the agentic-flow worker system, including trigger detection, agent selection, caching, and concurrent operations. Run a full suite or individual benchmarks to compare response times and resource usage against configured targets.
Review and strengthen security in claude-flow v3 by addressing dependency risks, password hashing, credential generation, input validation, file paths, and command execution. It also guides threat modeling and tests for security-critical code.
Test local web applications with Python scripts using Playwright, a browser automation tool. Verify interface behavior, investigate problems, capture screenshots, and inspect browser logs, with a helper that manages one or more application servers.
Review whether every page provides an accessible privacy policy link, especially in the footer. Check that the policy explains data collection, use, sharing, retention periods, contact details, and user rights, and identify missing information.
Review Referrer-Policy settings to limit sensitive URL details shared when visitors follow external links. Check response headers and pages containing private parameters, suggest suitable policy values, and explain how to verify the resulting browser behavior.
Review HTTP response headers and restrict browser features an application does not need, such as camera, microphone, and location access. Guide Permissions-Policy settings that limit what attackers could use if the site is compromised.