Plugins

6 plugins

Testing Handbook Skills

Skills from the Trail of Bits Application Security Testing Handbook (appsec.guide)

15 skills · plugin

Prototyping Testing

Prototyping and testing skills: wireframe specs, usability heuristics, heuristic evaluations, accessibility audits, A/B test design, and benchmark analysis.

8 skills · plugin

Development, customization, testing, and deployment skills for Adobe App Builder projects

6 skills · plugin

Planning skills for the Han suite: specifying, planning, sequencing, breaking down, and stress-testing work before implementation. Home of plan-a-feature, plan-implementation, plan-a-phased-build, plan-work-items, and iterative-plan-review, plus the discussion-facilitator agent. Depends on han-communication and han-core; bundled by the han meta-plugin.

5 skills · plugin

Builds multi-language source code graphs for security analysis: call graphs, attack surface mapping, blast radius, taint propagation, complexity hotspots, and entry point enumeration. Generates Mermaid diagrams (call graphs, class hierarchies, dependency maps, heatmaps). Compares code graph snapshots for structural diff and evolution analysis. Runs graph-informed mutation testing triage (genotoxic

10 skills · plugin

@alirezarezvani

Engineering Team

32 engineering skills: architecture, frontend, backend, fullstack, QA, DevOps, security, AI/ML, data engineering, Playwright (9 sub-skills), self-improving agent, Stripe integration, TDD guide, tech stack evaluator, Google Workspace CLI, a11y audit (WCAG 2.2), Azure cloud architect, GCP cloud architect, security pen testing, Snowflake development, adversarial-reviewer, ai-security, cloud-security,

16 skills · plugin

Results for “a-b-testing”

794 skills

Dotnet Best Practices

Ensure .NET/C# code meets project-specific best practices for structure, design patterns, dependency injection, async/await, testing, configuration, and security.

Plans a comprehensive app launch strategy, covering pre-launch ASO, press outreach, beta testing, launch-day activities, and post-launch optimization.

Kotlin Springboot

Provides best practices for building idiomatic Spring Boot applications with Kotlin, covering project setup, dependency injection, configuration, web layer, services, data layer, testing, and coroutines.

Playwright Skill

Automates browser interactions and testing with Playwright, including form filling, screenshots, responsive checks, and login flows, with automatic dev server detection.

construct-ai-primary

Testing Strategy

Use when planning how to test any deliverable or system. This skill provides a framework for selecting the right testing approach based on what is being delivered, ensuring comprehensive coverage without unnecessary overhead.

Testing Ransomware Recovery Procedures

Validate ransomware recovery plans by testing backup restore operations, measuring RTO/RPO targets, verifying data integrity, and documenting recovery gaps in an isolated lab environment.

24.6k · bundle

Ab Testing Statistics

Design and evaluate A/B tests with power, sample size, and robust metric interpretation. Use when: (1) planning controlled experiments, (2) reading p-values/effects, (3) sequential testing safeguards. NOT for: dark-pattern optimization.

Provides domain-specific best practices for Node.js development with TypeScript, covering type stripping, async patterns, error handling, streams, modules, testing, performance, caching, logging, and more.

Use when writing or modifying tests in a Bun project

Enforces strict outside-in red-green-refactor TDD with one-failure-per-turn discipline, predicting failures before every run, hardcoding minimum changes, and using triangulation and property-based testing. Triggers on explicit TDD requests and tasks phrased as 'implement', 'add', 'write a function', 'build a feature'.

Runs adversarial UI tests in a real browser, covering functional, accessibility, responsive, and UX checks, with diff-driven, exploratory, and parallel workflows.

Testing JWT Token Security

Assess JSON Web Token implementations for cryptographic weaknesses, algorithm confusion attacks, and authorization bypass vulnerabilities during security engagements.

24.6k · bundle

Chai BDD/TDD assertion library reference for JavaScript testing. Covers expect/should/assert styles, deep equality, type checks, string/array/object matchers, error assertions, chai-as-promised, chai-http for API testing, sinon-chai, and custom assertions.

Performing Physical Intrusion Assessment

Conduct authorized physical penetration testing using tailgating, badge cloning, lock bypassing, and rogue device deployment to evaluate facility security controls.

24.6k · bundle

ai-builder-club

Prove a feature works by delegating verification to an independent sub-agent that drives the real app, then open a pull request with the proof.

Implementa state management avanzado con BLoC y Cubit en Flutter, incluyendo persistencia con Hydrated BLoC, replay de estados, transformers para control de eventos y testing exhaustivo.

Testing Mobile API Authentication

Tests authentication and authorization mechanisms in mobile application APIs to identify broken authentication, insecure token management, session fixation, privilege escalation, and IDOR vulnerabilities.

24.6k · bundle

Testing Testing Accessibility Auditor

Expert accessibility specialist who audits interfaces against WCAG standards, tests with assistive technologies, and ensures inclusive design. Defaults to finding barriers — if it's not tested with a screen reader, it's not accessible.

Code Testing Agent

Generates and writes unit tests for any programming language using a multi-agent pipeline that researches, plans, and implements tests with build and verification steps.

Generates unit tests, integration tests, and E2E tests for React/Next.js applications by scanning components, analyzing coverage reports, and scaffolding Playwright test files.

20.4k · bundle

Exploiting SQL Injection Vulnerabilities

Identifies and exploits SQL injection vulnerabilities in web applications during authorized penetration tests using manual techniques and automated tools like sqlmap.

24.6k · bundle

Unit Test Vue Pinia

Write and review unit tests for Vue 3 + TypeScript + Vitest + Pinia codebases, covering components, composables, and stores with behavior-first assertions.

36.2k · bundle

Botemail AI Free Bot Email

Creates a temporary bot email address and checks its inbox via API, useful for testing signup flows, receiving verification codes, and automating email workflows.

Systematically explore a web application to find bugs and UX issues, producing a structured report with screenshots, repro videos, and detailed steps for each finding.

Design and evaluate paid-ad experiments with hypotheses, randomization, sample-size calculations, guardrails, and decision rules for A/B and split tests.

Java Springboot

Provides best practices for developing high-quality Spring Boot applications, covering project structure, dependency injection, configuration, web layer, service layer, data layer, logging, testing, and security.

Ata Ch Before Gh Stim

Recommends treating central hypothyroidism before performing GH stimulation testing because CH may impair accurate diagnosis of GHD. Use when preparing for GH stimulation testing; triggers include patient requiring GH stimulation test with possible CH.

Testing For Xxe Injection Vulnerabilities

Discover and exploit XML External Entity injection vulnerabilities to read server files, perform SSRF, and exfiltrate data during authorized penetration tests.

24.6k · bundle

Testing For Xss Vulnerabilities With Burpsuite

Identify and validate cross-site scripting vulnerabilities using Burp Suite's scanner, intruder, and repeater tools during authorized security assessments.

24.6k · bundle

Youtube Thumbnail Design

Design high-CTR YouTube thumbnails with AI image generation, covering dimensions, safe zones, color strategy, text rules, face expression psychology, and A/B testing.

Testing Android Intents For Vulnerabilities

Tests Android inter-process communication (IPC) through intents for vulnerabilities including intent injection, unauthorized component access, broadcast sniffing, pending intent hijacking, and content provider data leakage.

24.6k · bundle

Testing For Sensitive Data Exposure

Identify sensitive data exposure vulnerabilities including API key leakage, PII in responses, insecure storage, and unprotected data transmission during security assessments.

24.6k · bundle

Appbuilder E2e Testing

Generates Playwright-based browser end-to-end tests for Adobe App Builder SPAs and AEM extensions, including configs, test files, and CI workflows.

Performing Hash Cracking With Hashcat

Crack password hashes using Hashcat for authorized penetration testing and password policy assessment, supporting dictionary, brute-force, rule-based, and hybrid attacks.

24.6k · bundle

Validating Backup Integrity For Recovery

Validate backup integrity through cryptographic hash verification, automated restore testing, corruption detection, and recoverability checks to ensure backups are reliable for disaster recovery and ransomware response scenarios.

24.6k · bundle

Agent Experience

Run multiple AI agents against a product, SDK, or docs site to score setup friction, speed, efficiency, error recovery, and doc quality from a minimal prompt.