node-inspect-debugger
Debug Node.js via --inspect + Chrome DevTools Protocol CLI.
768 repo starsObserved in 1 repos
Testing & Quality
Testing & Quality skills
Browse reusable Agent Skills, each with a clear purpose and practical guidance.
python-debugpy
Debug Python: pdb REPL + debugpy remote (DAP).
768 repo starsObserved in 1 repos
Testing & Quality
traceability-review
Use when the user asks to review, verify, or audit a report, manuscript, or analysis in the workspace for traceability — resolving citations, flagging numbers with no source, and checking figures against the code that generated them. Emits a structured review block the app renders as reviewer findings. Verifies traceability, never "correctness".
768 repo starsObserved in 1 repos
Testing & Quality
typechecker-fixes
Fix mypy --strict type errors in crawler files. Use when the user asks to make the typechecker happy, fix types, or add type annotations to a crawler.
768 repo starsObserved in 1 repos
Testing & Quality
address-review
Address PR review comments systematically. Use when responding to code review feedback on a pull request.
766 repo starsObserved in 2 repos
Testing & Quality
browser-agent
Browser automation agent for interactive web testing. Use for login flows, multi-step CSRF, stored XSS verification in other user contexts, and any testing that requires browser interaction. Requires Claude in Chrome MCP.
766 repo starsObserved in 1 repos
Testing & Quality
browser-verifier
Mandatory browser verification for client-side findings (XSS, DOM, postMessage, prototype pollution). Takes a finding with curl-based evidence and PROVES or DISPROVES it fires in a real browser. No finding ships without browser verification. Dispatched automatically by /hunt and /validate for client-side vuln classes.
766 repo starsObserved in 1 repos
Testing & Quality
business-logic
Business Logic vulnerability specialist (H1 #28, CWE-840/841/639/362). Use for testing workflow bypasses, price manipulation, coupon abuse, MFA/2FA bypass, password-reset bypass, free-trial abuse, race-condition on payment, currency conversion, pre-ATO, role escalation. Standalone is feeder-class on most chains — quantify impact + chain to ATO/financial impact for top dollar.
766 repo starsObserved in 1 repos
Testing & Quality
csrf-hunter
CSRF specialist (H1 #57). Use for testing state-changing actions without proper token validation, SameSite cookie bypass, and CSRF in JSON/API endpoints.
766 repo starsObserved in 1 repos
Testing & Quality