Plugins
12 plugins@auto-skiller
Qa Testing
Qa Testing from Auto-Skiller/plugboot.
3 skills · plugin
curated
Testing & Quality
Testing, TDD, code review, linting and debugging.
25 skills · plugin
@trailofbits
Testing Handbook Skills
Skills from the Trail of Bits Application Security Testing Handbook (appsec.guide)
15 skills · plugin
@owl-listener
Prototyping Testing
Prototyping and testing skills: wireframe specs, usability heuristics, heuristic evaluations, accessibility audits, A/B test design, and benchmark analysis.
8 skills · plugin
@adobe
App Builder
Development, customization, testing, and deployment skills for Adobe App Builder projects
6 skills · plugin
@atc-net
Dotnet
C#/.NET development skills including refactoring, testing, async patterns, documentation, and NuGet management
7 skills · plugin
@cjthompson
Python Development
Deep Python production guidance for testing, project tooling, concurrency, and type-system work.
6 skills · plugin
@cjthompson
Typescript Development
Deep TypeScript production guidance for testing, tooling, modules, packaging, and type-system work.
6 skills · plugin
@phuryn
Product Discovery
Product discovery skills for PMs: ideation, experiments, assumption testing, feature prioritization, and customer interview synthesis.
13 skills · plugin
@owl-listener
Design Research
User research skills for designers: personas, empathy maps, journey maps, interview scripts, usability testing, and card sorting.
12 skills · plugin
curated
Coauthor Technical Document
Install this pack to collaboratively write a technical spec or RFC with context gathering, iterative refinement, and reader testing.
3 skills · plugin
@dotnet
Dotnet Test Migration
Skills and an orchestrator agent for migrating .NET test frameworks and platforms: MSTest and xUnit version upgrades, xUnit-to-MSTest conversion, and VSTest to Microsoft.Testing.Platform.
5 skills · plugin
Results for “testing”
48 skills
mukul975 performing-supply-chain-attack-simulation
Simulate and detect software supply chain attacks including typosquatting via Levenshtein distance, dependency confusion testing, package hash verification, and vulnerability scanning with pip-audit.
24.6k · bundle
mukul975 performing-csrf-attack-simulation
Test web applications for Cross-Site Request Forgery vulnerabilities by crafting forged requests that exploit authenticated user sessions during authorized security assessments.
24.6k · bundle
agentskillexchange owasp-zap-api-fuzzer
Automates REST API security testing using the OWASP ZAP Python SDK, running active scans, SQL injection probes, and XSS tests against OpenAPI specs with structured vulnerability reports.
28
shulkwisec codebase
Performs a white-box source code security review structured around OWASP ASVS 5.0, mapping attack surfaces, tracing data flows, and chaining into downstream penetration testing and threat modeling skills.
21 · bundle
mukul975 conducting-mobile-app-penetration-test
Conducts penetration testing of iOS and Android mobile applications following the OWASP MASTG to identify vulnerabilities in data storage, network communication, authentication, cryptography, and platform-specific security controls.
24.6k · bundle
zhaoxuya520 src-hunter
Provides a structured 5-phase workflow for bug bounty and SRC vulnerability hunting, including 19 attack-type playbooks, 305 structured payloads, 263 WAF bypass variants, and 2,887 real HackerOne case studies.
12.8k · bundle
shulkwisec cross-site-scripting-xss-complete-deep-dive
Provides a complete deep-dive into Cross-Site Scripting (XSS) with exact payloads and bypass techniques for every PortSwigger lab variant, from apprentice to expert level.
21 · bundle
shulkwisec dom-xss
Detect and exploit DOM-based XSS vulnerabilities by auditing JavaScript for tainted data flow from controllable sources to dangerous sinks, with payloads and bypass techniques for client-side testing.
21
mukul975 exploiting-excessive-data-exposure-in-api
Tests APIs for excessive data exposure where endpoints return more data than the client application needs, relying on the frontend to filter sensitive fields. Maps to OWASP API3:2023 Broken Object Property Level Authorization.
24.6k · bundle
mukul975 integrating-dast-with-owasp-zap-in-pipeline
Integrates OWASP ZAP for Dynamic Application Security Testing in CI/CD pipelines, configuring baseline, full, and API scans, interpreting findings, tuning policies, and establishing quality gates in GitHub Actions and GitLab CI.
24.6k · bundle
mukul975 auditing-foundry-smart-contract-security
Runs a pre-deployment security audit of Solidity smart contracts in a Foundry project, combining static analysis (Slither, Aderyn), symbolic execution (Mythril), and property-based testing to catch reentrancy, access-control, and arithmetic bugs before deploying to an EVM chain.
24.6k · bundle
tinh2 pentest
Performs a static-analysis penetration test to find exploitable vulnerabilities, providing proof-of-concept payloads and fixes. Covers injection, XSS, authentication bypass, authorization flaws, path traversal, command injection, CSRF, SSRF, hardcoded secrets, and insecure deserialization, with a full attack surface.
13