测试设计、漏洞检测、质量保证（1.4万 个）
Bearer CLI is an open-source static application security testing (SAST) tool that scans source code to identify, filter, and prioritize security vulnerabilities and privacy risks. Covers OWASP Top 10 and CWE Top 25 with data flow analysis across multiple languages.
中文简介正在准备中。当前显示原文说明。
Scan a repository for secrets, keep an auditable baseline, and review only newly introduced findings during commits or CI checks.
中文简介正在准备中。当前显示原文说明。
A fast, configurable secrets scanner built by the creator of Gitleaks and backed by Aikido Security. Betterleaks detects leaked passwords, API keys, and tokens in git repositories, directories, and stdin with CEL-based validation and parallelized scanning.
中文简介正在准备中。当前显示原文说明。
Check Python environments and requirements files for published vulnerabilities before shipping, upgrading, or approving dependency changes.
中文简介正在准备中。当前显示原文说明。
Inspect an SSH endpoint or config for outdated ciphers, key exchange choices, and hardening gaps before exposure or upgrades.
中文简介正在准备中。当前显示原文说明。
Add controlled retries to pytest runs so agents can contain flaky tests and report final failures without rerunning whole suites by hand.
中文简介正在准备中。当前显示原文说明。
Use Deptry when an agent needs to verify that a Python project's declared dependencies still match the imports the code actually uses. The agent scans the codebase, flags unused direct dependencies, missing declarations, and transitive imports that only work by accident, then turns the findings into cleanup commits or release blockers.
中文简介正在准备中。当前显示原文说明。
Scan Python requirements and environments for known vulnerable or malicious packages before they move further through delivery or promotion workflows.
中文简介正在准备中。当前显示原文说明。
axe-core is the industry-standard accessibility testing engine by Deque Systems that automatically detects WCAG 2.0, 2.1, and 2.2 violations in web interfaces. It integrates into any existing test framework — Playwright, Cypress, Selenium, Jest — to catch accessibility issues during development rather than after deployment.
中文简介正在准备中。当前显示原文说明。
This skill uses OpenClaw's healthcheck workflow to inspect the host running the assistant, surface risky exposure, and turn the findings into a staged hardening plan. It is for operator-style audits with explicit approval gates, not a generic software listing or a replacement for OS administration.
中文简介正在准备中。当前显示原文说明。
Uses boto3 and the AWS IAM Access Analyzer API to enumerate all roles, policies, and users, then flags permission combinations that could allow privilege escalation to AdministratorAccess. Outputs findings mapped to MITRE ATT&CK TA0004 with remediation steps and least-privilege replacement policy JSON.
中文简介正在准备中。当前显示原文说明。
Use GEO SEO Claude when Claude Code should run repeatable AI-search and SEO audits with citability, crawler, schema, platform, and report workflows.
中文简介正在准备中。当前显示原文说明。
Use Agent QA's CLI and MCP server to author, validate, run, debug, and triage natural-language web and mobile regression tests with persistent test memory and reviewable run evidence.
中文简介正在准备中。当前显示原文说明。
Run targeted AWS, Azure, or GCP security and compliance audits when an agent needs actionable cloud findings instead of a generic cloud-security platform overview.
中文简介正在准备中。当前显示原文说明。
Use Retentioneering's Python toolkit, MCP server, and agent skills to run reproducible customer-journey and event-log analytics that agents can validate and cross-check.
中文简介正在准备中。当前显示原文说明。
Use REUSE when an agent needs file-level licensing clarity instead of guessing from a single top-level LICENSE file. The agent checks compliance, adds or verifies SPDX headers, pulls missing license texts into LICENSES/, and produces a concrete remediation list or SPDX export.
中文简介正在准备中。当前显示原文说明。
Use Chops to discover, search, edit, and organize local or remote agent skills across Claude Code, Cursor, Codex, Windsurf, Amp, Copilot, and Aider.
中文简介正在准备中。当前显示原文说明。
Run a repeatable HIG compliance audit over app code before shipping UI changes, then use the findings to guide remediation.
中文简介正在准备中。当前显示原文说明。
Use Cloudsplaining when an agent needs to flag privilege-escalation paths and overbroad IAM permissions before an AWS policy change reaches production.
中文简介正在准备中。当前显示原文说明。
Run a focused security pass on GitHub Actions workflows before merge so token misuse, dangerous permissions, and unpinned actions are caught early.
中文简介正在准备中。当前显示原文说明。
Use Avoid AI Writing when an agent needs a repeatable audit, rewrite, or in-place edit workflow for removing AI writing patterns from draft prose.
中文简介正在准备中。当前显示原文说明。
Uses Lynis to run an on-host security audit and turn the findings into a prioritized hardening checklist for an agent or operator. Invoke it when a machine is about to become internet-facing, after base image changes, or whenever you need a quick read on hardening drift instead of a generic vulnerability scan.
中文简介正在准备中。当前显示原文说明。
Produce a license inventory for Go module dependencies before release, procurement review, or open-source due diligence.
中文简介正在准备中。当前显示原文说明。
Use HarnessKit to inventory, audit, enable, disable, and deploy skills, MCP servers, plugins, hooks, CLIs, configs, memory, and rules across multiple coding agents.
中文简介正在准备中。当前显示原文说明。