Plugins
6 plugins@trailofbits
Testing Handbook Skills
Skills from the Trail of Bits Application Security Testing Handbook (appsec.guide)
15 skills · plugin
@owl-listener
Prototyping Testing
Prototyping and testing skills: wireframe specs, usability heuristics, heuristic evaluations, accessibility audits, A/B test design, and benchmark analysis.
8 skills · plugin
@adobe
App Builder
Development, customization, testing, and deployment skills for Adobe App Builder projects
6 skills · plugin
@testdouble
Han Planning
Planning skills for the Han suite: specifying, planning, sequencing, breaking down, and stress-testing work before implementation. Home of plan-a-feature, plan-implementation, plan-a-phased-build, plan-work-items, and iterative-plan-review, plus the discussion-facilitator agent. Depends on han-communication and han-core; bundled by the han meta-plugin.
5 skills · plugin
@trailofbits
Trailmark
Builds multi-language source code graphs for security analysis: call graphs, attack surface mapping, blast radius, taint propagation, complexity hotspots, and entry point enumeration. Generates Mermaid diagrams (call graphs, class hierarchies, dependency maps, heatmaps). Compares code graph snapshots for structural diff and evolution analysis. Runs graph-informed mutation testing triage (genotoxic
10 skills · plugin
@alirezarezvani
Engineering Team
32 engineering skills: architecture, frontend, backend, fullstack, QA, DevOps, security, AI/ML, data engineering, Playwright (9 sub-skills), self-improving agent, Stripe integration, TDD guide, tech stack evaluator, Google Workspace CLI, a11y audit (WCAG 2.2), Azure cloud architect, GCP cloud architect, security pen testing, Snowflake development, adversarial-reviewer, ai-security, cloud-security,
16 skills · plugin
Results for “a-b-testing”
371 skillsAb Testing Statistics
Design and evaluate A/B tests with power, sample size, and robust metric interpretation. Use when: (1) planning controlled experiments, (2) reading p-values/effects, (3) sequential testing safeguards. NOT for: dark-pattern optimization.
0
Node
Provides domain-specific best practices for Node.js development with TypeScript, covering type stripping, async patterns, error handling, streams, modules, testing, performance, caching, logging, and more.
1.9k · bundle
Testing Bun
Use when writing or modifying tests in a Bun project
1
Tdd
Enforces strict outside-in red-green-refactor TDD with one-failure-per-turn discipline, predicting failures before every run, hardcoding minimum changes, and using triangulation and property-based testing. Triggers on explicit TDD requests and tasks phrased as 'implement', 'add', 'write a function', 'build a feature'.
7
UI Test
Runs adversarial UI tests in a real browser, covering functional, accessibility, responsive, and UX checks, with diff-driven, exploratory, and parallel workflows.
1 · bundle
Pr
Prove a feature works by delegating verification to an independent sub-agent that drives the real app, then open a pull request with the proof.
770 · bundle
Bloc Advanced
Implementa state management avanzado con BLoC y Cubit en Flutter, incluyendo persistencia con Hydrated BLoC, replay de estados, transformers para control de eventos y testing exhaustivo.
4
Code Testing Agent
Generates and writes unit tests for any programming language using a multi-agent pipeline that researches, plans, and implements tests with build and verification steps.
4k · bundle
Senior QA
Generates unit tests, integration tests, and E2E tests for React/Next.js applications by scanning components, analyzing coverage reports, and scaffolding Playwright test files.
20.4k · bundle
Unit Test Vue Pinia
Write and review unit tests for Vue 3 + TypeScript + Vitest + Pinia codebases, covering components, composables, and stores with behavior-first assertions.
36.2k · bundle
Dogfood
Systematically explore a web application to find bugs and UX issues, producing a structured report with screenshots, repro videos, and detailed steps for each finding.
559 · bundle
Java Springboot
Provides best practices for developing high-quality Spring Boot applications, covering project structure, dependency injection, configuration, web layer, service layer, data layer, logging, testing, and security.
36.2k
Ata Ch Before Gh Stim
Recommends treating central hypothyroidism before performing GH stimulation testing because CH may impair accurate diagnosis of GHD. Use when preparing for GH stimulation testing; triggers include patient requiring GH stimulation test with possible CH.
10
Testing For Xxe Injection Vulnerabilities
Discover and exploit XML External Entity injection vulnerabilities to read server files, perform SSRF, and exfiltrate data during authorized penetration tests.
24.6k · bundle
Youtube Thumbnail Design
Design high-CTR YouTube thumbnails with AI image generation, covering dimensions, safe zones, color strategy, text rules, face expression psychology, and A/B testing.
584
Appbuilder E2e Testing
Generates Playwright-based browser end-to-end tests for Adobe App Builder SPAs and AEM extensions, including configs, test files, and CI workflows.
142 · bundle
Validating Backup Integrity For Recovery
Validate backup integrity through cryptographic hash verification, automated restore testing, corruption detection, and recoverability checks to ensure backups are reliable for disaster recovery and ransomware response scenarios.
24.6k · bundle
Fastify Best Practices
Guides development of Fastify Node.js backend servers and REST APIs using TypeScript or JavaScript, covering routes, plugins, validation, error handling, authentication, testing, performance, logging, deployment, and more.
1.9k · bundle
Chaos
Maps external dependencies and I/O boundaries, generates chaos tests for failure modes like timeouts and connection errors, runs them, and reports resilience gaps with fixes.
13
Feature Flags
Implements feature flags and remote configuration in Flutter apps using Firebase Remote Config and LaunchDarkly, enabling staged rollouts, A/B testing, and kill switches without app updates.
4
Testing For XML Injection Vulnerabilities
Test web applications for XML injection vulnerabilities including XXE, XPath injection, and XML entity attacks to identify data exposure and server-side request forgery risks.
24.6k · bundle
Network 101
This skill should be used when the user asks to "set up a web server", "configure HTTP or HTTPS", "perform SNMP enumeration", "configure SMB shares", "test network services", or needs guidance on configuring and testing network services for penetration testing labs.
0
Network 101
This skill should be used when the user asks to "set up a web server", "configure HTTP or HTTPS", "perform SNMP enumeration", "configure SMB shares", "test network services", or needs guidance on configuring and testing network services for penetration testing labs.
2
Quality Playbook
Runs a complete quality engineering audit on any codebase, deriving behavioral requirements, generating spec-traced tests, performing multi-pass code review, and producing a consolidated bug report with verified patches.
36.2k · bundle
Autoresearch
Guides users through defining goals, metrics, and scope, then runs an autonomous loop of code changes, testing, measuring, and keeping or discarding results for any programming task with a measurable outcome.
36.2k
Vector Forge
Uses mutation testing to systematically identify gaps in test vector coverage for cryptographic algorithms, then generates new test vectors that close those gaps. Measures effectiveness by comparing mutation kill rates before and after.
6k · bundle
Dogfood
Systematic exploratory QA testing of web applications — find bugs, capture evidence, and generate structured reports
3 · bundle
Dogfood
Systematic exploratory QA testing of web applications — find bugs, capture evidence, and generate structured reports
0 · bundle
Vitest
Vitest - Modern TypeScript testing framework with Vite-native performance, ESM support, and TypeScript-first design
71 · bundle
Browser Testing With Devtools
Tests and debugs web applications in real browsers using Chrome DevTools MCP, enabling DOM inspection, console error capture, network analysis, performance profiling, and visual verification with live runtime data.
69.5k
Test Coverage Categories
Comprehensive systematic approach to achieving complete test coverage through structured category-based testing
2
Load Testing
Most teams run one test — expected peak for ten minutes — and believe they have
2
Browser Use
Automates browser interactions for web testing, form filling, screenshots, and data extraction. Use when the user needs to navigate websites, interact with web pages, fill forms, take screenshots, or extract information from web pages.
2
Implementing Ransomware Backup Strategy
Designs and implements a ransomware-resilient backup strategy following the 3-2-1-1-0 methodology, including asset classification, immutable storage configuration, credential isolation, and automated restore testing.
24.6k · bundle
Browser Use
Direct browser control via CDP for web interaction: automation, scraping, testing, screenshots, and site/app work.
0
Conducting Man In The Middle Attack Simulation
Simulates man-in-the-middle attacks using Ettercap, mitmproxy, and Bettercap in authorized environments to intercept, analyze, and modify network traffic for testing encryption enforcement, certificate validation, and detection capabilities.
24.6k · bundle