Plugins
3 plugins@trailofbits
Testing Handbook Skills
Skills from the Trail of Bits Application Security Testing Handbook (appsec.guide)
15 skills · plugin
@adobe
App Builder
Development, customization, testing, and deployment skills for Adobe App Builder projects
6 skills · plugin
curated
Debug Web App with DevTools
Install this pack to test and debug a web application in a real browser using Chrome DevTools MCP.
7 skills · plugin
Results for “test-app”
9 skillsshipping-artifacts
Documents AI-built apps with architecture, permissions, secrets, and test coverage maps to make them reviewable before shipping.
22.6k
configuring-tls-1-3-for-secure-communications
Configure TLS 1.3 on nginx, Apache, and Python applications, validate configurations with openssl and testssl.sh, and disable legacy TLS versions.
24.6k · bundle
testing-for-broken-access-control
Systematically test web applications for broken access control vulnerabilities including privilege escalation, missing function-level checks, and insecure direct object references.
24.6k · bundle
More results
semgrep-rule-variant-creator
Ports existing Semgrep rules to new target languages with applicability analysis and test-driven validation.
6k · bundle
mobile-reverse
Provides a structured methodology for authorized Android and iOS reverse engineering, covering static analysis, dynamic instrumentation with Frida and Objection, SSL pinning bypass, root/jailbreak detection evasion, and cryptographic key extraction.
12.8k · bundle
reverse-skill-router
Routes reverse engineering, exploitation, penetration testing, malware, mobile, firmware, browser automation, documentation, and security tasks to the appropriate specialist skill. Use when a task spans modules or the correct reverse-skill entrypoint is unclear.
12.8k · bundle
security-audit
Finds exploitable vulnerabilities in codebases through a structured multi-phase audit covering recon, hunting, validation, and reporting.
· bundle
thick-client
Authorized security testing framework for desktop thick clients covering local storage, IPC, update channels, traffic interception, and client-side trust boundaries.
12.8k · bundle
integrating-sast-into-github-actions-pipeline
Integrates Static Application Security Testing (SAST) tools—CodeQL and Semgrep—into GitHub Actions CI/CD pipelines, configuring automated code scanning, tuning rules, uploading SARIF results, and establishing quality gates that block merges on high-severity vulnerabilities.
24.6k · bundle