agentsight-bugfix
AgentSight fix issues 流程。了解问题 → 复现验证 → 根因分析 → 编码修复 → 验证修复，五阶段标准化调试迭代循环。确保 AI agent 遵循最小改动、逐轮验证的修复规范。
280 repo starsObserved in 2 repos
Testing & Quality
Testing & Quality skills
Browse reusable Agent Skills, each with a clear purpose and practical guidance.
agentsight-code-review
对当前分支的变更执行 AgentSight 专属代码审查。覆盖 6 个维度：硬性规则合规、eBPF 安全、FFI 边界、Footprint Ladder、流水线测试覆盖、文档同步。输出编号的 findings 列表，每条包含文件路径和行号。
280 repo starsObserved in 2 repos
Testing & Quality
code-scanner
扫描 Bash / Python 代码片段中的安全风险，返回结构化 JSON 扫描结果。当用户要求检查代码安全性时使用。
280 repo starsObserved in 2 repos
Testing & Quality
injection-testing
Validate miscellaneous injection vulnerabilities NOT covered by dedicated skills. Covers SSTI, LDAP, XPath, XQuery, CRLF/HTTP Header, Email Header, GraphQL, Expression Language (EL/OGNL), JSON/JavaScript eval injection, ORM/HQL, CSV/Formula, Regex (ReDoS), YAML config, and Shellshock-style injection. Use when testing CWE-1336 (SSTI), CWE-90 (LDAP), CWE-643 (XPath), CWE-652 (XQuery), CWE-93/CWE-113 (CRLF/Header), CWE-917 (EL), CWE-94/CWE-95 (Code/Eval injection), CWE-1333 (ReDoS), CWE-1236 (CSV/Formula), and related injection classes.
280 repo starsObserved in 2 repos
Testing & Quality
sql-injection-testing
Validate SQL injection vulnerabilities (including blind SQLi) across time-based, error-based, boolean-based, UNION-based, stacked-query, and out-of-band patterns. Use when testing CWE-89 (SQL Injection), CWE-564 (Hibernate SQL Injection), and related SQL injection classes across MySQL, PostgreSQL, MSSQL, Oracle, and SQLite targets.
280 repo starsObserved in 2 repos
Testing & Quality
xxe-testing
Validate XML External Entity (XXE) injection vulnerabilities including file disclosure, SSRF, denial of service, and blind XXE via out-of-band channels. Test by injecting malicious XML with external entity references into endpoints that parse XML. Use when testing CWE-611 (XXE), CWE-827 (Improper Control of Document Type Definition), or related XML parsing vulnerabilities.
280 repo starsObserved in 2 repos
Testing & Quality
run-post-training-sample
Bring up the OmniDreams post-training sample and run/report the E1, E2, and E3 release experiments on 8-256 H100 GPUs. Use when validating samples/post-training, Slurm or torchrun launches, FSDP/CP scaling, finite-loss smoke tests, or post-training environment setup.
280 repo starsObserved in 1 repos
Testing & Quality
browser-debugger
Systematically tests UI functionality, validates design fidelity with AI visual analysis, monitors console output, tracks network requests, and provides debugging reports using Chrome DevTools MCP. Use after implementing UI features, for design validation, when investigating console errors, for regression testing, or when user mentions testing, browser bugs, console errors, or UI verification.
279 repo starsObserved in 7 repos
Testing & Quality
debugger-detective
⚡ Debugging skill. Best for: 'why is X broken', 'find bug source', 'root cause analysis', 'trace error', 'debug issue'. Uses claudemem AST with context command for efficient call chain analysis.
279 repo starsObserved in 2 repos
Testing & Quality
performance-security
Use when optimizing performance or reviewing security. Covers code-splitting, React Compiler patterns, asset optimization, a11y testing, and security hardening for React apps.
279 repo starsObserved in 2 repos
Testing & Quality