Plugins

6 plugins

Testing Handbook Skills

Skills from the Trail of Bits Application Security Testing Handbook (appsec.guide)

15 skills · plugin

Prototyping Testing

Prototyping and testing skills: wireframe specs, usability heuristics, heuristic evaluations, accessibility audits, A/B test design, and benchmark analysis.

8 skills · plugin

Development, customization, testing, and deployment skills for Adobe App Builder projects

6 skills · plugin

Planning skills for the Han suite: specifying, planning, sequencing, breaking down, and stress-testing work before implementation. Home of plan-a-feature, plan-implementation, plan-a-phased-build, plan-work-items, and iterative-plan-review, plus the discussion-facilitator agent. Depends on han-communication and han-core; bundled by the han meta-plugin.

5 skills · plugin

Builds multi-language source code graphs for security analysis: call graphs, attack surface mapping, blast radius, taint propagation, complexity hotspots, and entry point enumeration. Generates Mermaid diagrams (call graphs, class hierarchies, dependency maps, heatmaps). Compares code graph snapshots for structural diff and evolution analysis. Runs graph-informed mutation testing triage (genotoxic

10 skills · plugin

@alirezarezvani

Engineering Team

32 engineering skills: architecture, frontend, backend, fullstack, QA, DevOps, security, AI/ML, data engineering, Playwright (9 sub-skills), self-improving agent, Stripe integration, TDD guide, tech stack evaluator, Google Workspace CLI, a11y audit (WCAG 2.2), Azure cloud architect, GCP cloud architect, security pen testing, Snowflake development, adversarial-reviewer, ai-security, cloud-security,

16 skills · plugin

Results for “a-b-testing”

371 skills

Launches a Flutter app on a simulator or emulator, generates and runs exhaustive integration tests covering every screen, button, form, and user flow, then self-heals failures.

Dart Flutter Patterns

Provides production-ready Dart and Flutter code patterns for null safety, immutable state, async composition, widget architecture, state management, navigation, networking, and testing.

Refactoring Patterns

Apply named refactoring transformations to improve code structure without changing behavior, guided by code smells and safe transformation sequences.

Subagent Driven Development

Execute implementation plans by dispatching a fresh subagent per task, with task review after each and a whole-branch review at the end.

Automate web browser interactions using natural language via CLI commands. Supports local and remote Browserbase sessions with CAPTCHA solving, residential proxies, and session persistence.

Browser QA Router

Route browser, UI QA, smoke testing, click-path auditing, Webwright, and desktop app automation prompts. Use when prompts mention browser QA, Playwright, smoke tests, app/browser interaction, click paths, screenshots, Webwright, or Windows desktop E2E.

Ata Preop Stress Dosing

Recommends administering stress-dose glucocorticoids before surgery and tapering after surgery in patients with adrenal insufficiency before repeat testing. Triggers include preoperative planning for surgery in a patient with known or suspected adrenal insufficiency.

Performing Ssl Stripping Attack

Simulates SSL stripping attacks using sslstrip, Bettercap, and mitmproxy in authorized environments to test HSTS enforcement, certificate validation, and HTTPS upgrade mechanisms.

24.6k · bundle

Provides expert guidance on modern Java 21+ development, including virtual threads, Spring Boot 3.x, GraalVM, and cloud-native patterns for building scalable enterprise applications.

React Native Dev

Build production-ready React Native and Expo apps with guidance on components, styling, animations, navigation, state management, forms, networking, performance, testing, and deployment.

12.9k · bundle

Write effective unit tests with best practices for any project. Use when writing tests, creating test cases, improving test coverage, increasing confidence before release, or when the user mentions testing. Mutation score / assertion theater → test-mutation.

Salesforce Apex Quality

Enforces bulk-safety rules, sharing model requirements, CRUD/FLS security, SOQL injection prevention, PNB test coverage, and modern Apex idioms for Salesforce development.

Python Project Tooling

Configure and maintain Python projects, dependencies, packaging, environments, linting, formatting, type checking, testing, builds, and publishing. Use for pyproject.toml, an existing repository toolchain, or repository-level Python tooling work, not for a standalone script.

Guides the creation of high-quality MCP servers that let LLMs interact with external services through well-designed tools, covering planning, implementation, testing, and evaluation.

lucaspmarie-a11y

Write defensive, portable Bash scripts for automation, CI/CD, and system utilities, with strict error handling, safe argument parsing, and testing via Bats and ShellCheck.

Walks a running app across routes, states, and interactions to find real bugs, then root-causes, fixes, adds regression tests, and verifies each fix before committing.

Extracts a language-agnostic ghost package (spec, tests, install and verify docs) from an existing repository, preserving behavior via tests.yaml and evidence bundles.

Legacy Modernizer

Designs incremental migration strategies, identifies service boundaries, produces dependency maps and migration roadmaps, and generates API facade designs for aging codebases.

10.4k · bundle

Pine Backtester

Implements comprehensive backtesting capabilities for Pine Script indicators and strategies. Use when adding performance metrics, trade analysis, equity curves, win rates, drawdown tracking, or statistical validation. Triggers on "backtest", "performance", "metrics", "win rate", "drawdown", or testing requests.

Provides 45 best-practice rules across 8 categories for mocking APIs with MSW v2, covering setup, handler architecture, test integration, response patterns, request matching, GraphQL, advanced patterns, and debugging.

Guides the creation of high-quality MCP servers that enable LLMs to interact with external services through well-designed tools, covering planning, implementation, testing, and evaluation.

Performing Purple Team Exercise

Coordinates purple team exercises by running MITRE ATT&CK-mapped attack scenarios with real-time detection testing and collaborative gap remediation.

24.6k · bundle

Builds, refines, tests, or validates a CLI-Anything harness for a GUI application or source repository, producing a stateful Click CLI with JSON output and REPL mode.

Defines a test strategy for Salesforce Flow, combining declarative Flow Tests, debug runs, path matrices, test data, and boundary tests for Apex, LWC, and external services.

Pol Probe Advisor

Select the right Proof of Life (PoL) probe type based on hypothesis, risk, and resources to match validation method to the real learning goal.

Gan Style Harness

Uses a multi-agent generator-evaluator feedback loop to build high-quality applications from a single prompt, inspired by GANs and Anthropic's harness design.

Auditing Entra Id With Aadinternals

Run Microsoft Entra ID tenant reconnaissance, token acquisition and manipulation, and federation backdoor testing with the AADInternals PowerShell toolkit to validate identity-attack resilience.

24.6k · bundle

Apex System Runas

Impersonate a user in Apex tests with System.runAs to verify sharing, profile, and permission-set behavior, and to work around mixed-DML errors in test setup.

Guides the creation of high-quality MCP servers that let LLMs interact with external services through well-designed tools, covering planning, implementation, testing, and evaluation.

Pentest Commands

This skill should be used when the user asks to "run pentest commands", "scan with nmap", "use metasploit exploits", "crack passwords with hydra or john", "scan web vulnerabilities with nikto", "enumerate networks", or needs essential penetration testing command references.

Testing For Broken Access Control

Systematically test web applications for broken access control vulnerabilities including privilege escalation, missing function-level checks, and insecure direct object references.

24.6k · bundle

cloudthinker-ai

Manages Detox end-to-end tests for React Native apps by discovering configuration, devices, and test files, then analyzing build setups and parsing test results into structured reports.

Generate Testability Wrappers

Generate wrapper interfaces, default implementations, and DI registration code to make hard-to-test static dependencies in C# testable, using built-in abstractions like TimeProvider or custom wrappers.

Designs and implements backend systems including REST APIs, microservices, database architectures, authentication flows, and security hardening. Covers Node.js/Express/Fastify development, PostgreSQL optimization, API security, and backend architecture patterns.

20.4k · bundle

Testing For Open Redirect Vulnerabilities

Identify and test open redirect vulnerabilities in web applications by analyzing URL redirection parameters, bypass techniques, and exploitation chains for phishing and token theft.

24.6k · bundle

Exploiting HTTP Request Smuggling

Detect and exploit HTTP request smuggling vulnerabilities caused by Content-Length and Transfer-Encoding parsing discrepancies between front-end and back-end servers.

24.6k · bundle