测试设计、漏洞检测、质量保证（1.4万 个）
Uses mitmproxy2swagger to turn captured mitmproxy flows or HAR exports into a first-pass OpenAPI document that an agent can refine, validate, and hand off to downstream tooling. Invoke it when the API already exists but the contract does not, and you need a concrete spec before generating clients, mocks, tests, or reviewable docs.
中文简介正在准备中。当前显示原文说明。
BackstopJS gives agents a repeatable way to capture reference screenshots, compare UI states, and flag visual regressions before changes ship. This skill centers on the real BackstopJS project and turns browser-based layout comparison into a structured QA workflow for web teams.
中文简介正在准备中。当前显示原文说明。
Run a repeatable evaluation suite for browser agents against static web task snapshots instead of judging them from demos or one-off tests.
中文简介正在准备中。当前显示原文说明。
Run concurrent scripted conversations against a target agent to measure whether it stays on task, responds correctly, and holds up in repeatable test cases.
中文简介正在准备中。当前显示原文说明。
Scan a repository for secrets, keep an auditable baseline, and review only newly introduced findings during commits or CI checks.
中文简介正在准备中。当前显示原文说明。
Use Deptry when an agent needs to verify that a Python project's declared dependencies still match the imports the code actually uses. The agent scans the codebase, flags unused direct dependencies, missing declarations, and transitive imports that only work by accident, then turns the findings into cleanup commits or release blockers.
中文简介正在准备中。当前显示原文说明。
axe-core is the industry-standard accessibility testing engine by Deque Systems that automatically detects WCAG 2.0, 2.1, and 2.2 violations in web interfaces. It integrates into any existing test framework — Playwright, Cypress, Selenium, Jest — to catch accessibility issues during development rather than after deployment.
中文简介正在准备中。当前显示原文说明。
This skill uses OpenClaw's healthcheck workflow to inspect the host running the assistant, surface risky exposure, and turn the findings into a staged hardening plan. It is for operator-style audits with explicit approval gates, not a generic software listing or a replacement for OS administration.
中文简介正在准备中。当前显示原文说明。
Scan Python requirements and environments for known vulnerable or malicious packages before they move further through delivery or promotion workflows.
中文简介正在准备中。当前显示原文说明。
Inspect an SSH endpoint or config for outdated ciphers, key exchange choices, and hardening gaps before exposure or upgrades.
中文简介正在准备中。当前显示原文说明。
Check Python environments and requirements files for published vulnerabilities before shipping, upgrading, or approving dependency changes.
中文简介正在准备中。当前显示原文说明。
Use GEO SEO Claude when Claude Code should run repeatable AI-search and SEO audits with citability, crawler, schema, platform, and report workflows.
中文简介正在准备中。当前显示原文说明。
Add controlled retries to pytest runs so agents can contain flaky tests and report final failures without rerunning whole suites by hand.
中文简介正在准备中。当前显示原文说明。
Uses boto3 and the AWS IAM Access Analyzer API to enumerate all roles, policies, and users, then flags permission combinations that could allow privilege escalation to AdministratorAccess. Outputs findings mapped to MITRE ATT&CK TA0004 with remediation steps and least-privilege replacement policy JSON.
中文简介正在准备中。当前显示原文说明。
Use Agent QA's CLI and MCP server to author, validate, run, debug, and triage natural-language web and mobile regression tests with persistent test memory and reviewable run evidence.
中文简介正在准备中。当前显示原文说明。
Use Cloudsplaining when an agent needs to flag privilege-escalation paths and overbroad IAM permissions before an AWS policy change reaches production.
中文简介正在准备中。当前显示原文说明。
Use Retentioneering's Python toolkit, MCP server, and agent skills to run reproducible customer-journey and event-log analytics that agents can validate and cross-check.
中文简介正在准备中。当前显示原文说明。
Run targeted AWS, Azure, or GCP security and compliance audits when an agent needs actionable cloud findings instead of a generic cloud-security platform overview.
中文简介正在准备中。当前显示原文说明。
Use REUSE when an agent needs file-level licensing clarity instead of guessing from a single top-level LICENSE file. The agent checks compliance, adds or verifies SPDX headers, pulls missing license texts into LICENSES/, and produces a concrete remediation list or SPDX export.
中文简介正在准备中。当前显示原文说明。
Run a repeatable HIG compliance audit over app code before shipping UI changes, then use the findings to guide remediation.
中文简介正在准备中。当前显示原文说明。
Use HarnessKit to inventory, audit, enable, disable, and deploy skills, MCP servers, plugins, hooks, CLIs, configs, memory, and rules across multiple coding agents.
中文简介正在准备中。当前显示原文说明。
Uses Lynis to run an on-host security audit and turn the findings into a prioritized hardening checklist for an agent or operator. Invoke it when a machine is about to become internet-facing, after base image changes, or whenever you need a quick read on hardening drift instead of a generic vulnerability scan.
中文简介正在准备中。当前显示原文说明。
Use GEO Optimizer from the CLI or MCP so agents can audit a site for AI search visibility, generate llms.txt/schema fixes, check bot access, and track citation readiness.
中文简介正在准备中。当前显示原文说明。
Produce a license inventory for Go module dependencies before release, procurement review, or open-source due diligence.
中文简介正在准备中。当前显示原文说明。