Agent skills for Software Quality Assurance Analysts and Testers

99 agent skills are labelled for Software Quality Assurance Analysts and Testers work. They are listed by code score, out of 100.

All 99

constraint-driven-development addyosmani/agent-skills
Establishes a project's quality bar as a written contract and stops agents quietly lowering it. Interviews the user on which dimensions matter, supplies sane default thresholds wh…

Verified91A
harness-eval HKUDS/OpenHarness
This skill should be used when the user asks to "test the harness", "run integration tests", "validate features with real API", "test with real model calls", "run agent loop tests…

Verified89A
ui-demo affaan-m/ECC
Record polished UI demo videos using Playwright. Use when the user asks to create a demo, walkthrough, screen recording, or tutorial video of a web application. Produces WebM vide…

Verified85A
flutter-testing midudev/autoskills
Write, fix, review, debug, and validate Flutter tests for apps, packages, and plugins. Use when adding unit tests, widget tests, integration tests, MethodChannel or plugin mocks,…

Verified85A
java-testcontainers github/awesome-copilot
Write reliable integration tests in plain Java with Testcontainers 2.x: JUnit Jupiter lifecycle, singleton containers, reuse, generic containers, wait strategies, networks, init s…

Verified83B
red-green-proof alirezarezvani/claude-skills
Turns a suspected bug into a proven one. Verify the cause against reality before claiming it, write a test that FAILS on the current code, apply the fix, watch it pass — then reve…

Verified83B
conducting-api-security-testing mukul975/Anthropic-Cybersecurity-Skills
Conducts security testing of REST, GraphQL, and gRPC APIs to identify vulnerabilities in authentication, authorization, rate limiting, input validation, and business logic. The te…

Verified82B
post-patch-validation trailofbits/skills
Validates security patches with reproducible baseline-versus-patched evidence, including original exploits, root-cause variants, behavior preservation, regressions, and newly intr…

Verified82B
eas-simulator expo/skills
Run and control a user's app on a remote iOS/Android simulator hosted on EAS cloud. Read before running any `eas simulator:*` commands - it has the current syntax for this experim…

Verified82B
terminal-bench-loop paperclipai/paperclip
Run one Terminal-Bench task through a bounded Paperclip smoke/diagnosis/fix loop. Use when asked to drive Terminal-Bench until it passes, rerun a Terminal-Bench loop, or iterate w…

Verified81B
devil davila7/claude-code-templates
Reviews a product document (PRD, spec, design brief) BEFORE implementation to surface holes — undefined edge cases, missing states, policy gaps — by attacking what the document is…

81B
skill-tester alirezarezvani/claude-skills
Use when authoring or auditing a skill in this ecosystem, before release. Validates structure with skill_validator.py, runs its scripts with script_tester.py and grades quality an…

Verified81B
chaos-engineer Jeffallan/claude-skills
Designs chaos experiments, creates failure injection frameworks, and facilitates game day exercises for distributed systems — producing runbooks, experiment manifests, rollback pr…

Verified81B
harness-eval tech-leads-club/agent-skills
Evaluate a repo agent harness (AGENTS.md, rules, skills, skill refs) for broken paths/commands, redundant instructions, and usefulness using a stack-agnostic dual-judge protocol w…

Verified81B
cypress-flake-fixer github/awesome-copilot
Find and fix flake-prone anti-patterns in an existing Cypress suite, and APIs removed in Cypress 12 to 16. Bundles a zero-dependency scanner for fixed cy.wait() delays, assigned c…

Verified80B
diagnose-ci-gate github/awesome-copilot
Determine whether a failing CI check was caused by the current change, then recommend exactly one action. Use when a required check fails on a pull request, when asked "is this fa…

Verified80B
scoutqa-test github/awesome-copilot
This skill should be used when the user asks to "test this website", "run exploratory testing", "check for accessibility issues", "verify the login flow works", "find bugs on this…

Verified80B
generate-python-runnability-test google/adk-recipes
Generates a lightweight `tests/test_runnability.py` for a Python recipe. The test just imports the recipe's agent module and asserts that `root_agent is not None` (and `app is not…

Verified80B
test-service midudev/autoskills
Use when writing RSpec for a service object under spec/services/. Test the public .call contract. Trigger words: service spec, test service object, spec/services.

Verified80B
create-verification-skill paperclipai/paperclip
Generate a project-local verification skill that drives your app the way a user does — any language, framework, or platform. Use for /create-verification-skill, "make a control sk…

79B
quality-playbook github/awesome-copilot
Run a complete quality engineering audit on any codebase. Derives behavioral requirements from the code, generates spec-traced functional tests, runs a three-pass code review with…

79B
test-gap-audit github/awesome-copilot
Run a read-only audit for missing, weak, stale, or mis-scoped test coverage. If the user does not name a scope, audit the full repository and identify important code paths, routes…

79B
playwright-best-practices midudev/autoskills
Use when writing Playwright tests, fixing flaky tests, debugging failures, implementing Page Object Model, configuring CI/CD, optimizing performance, mocking APIs, handling authen…

79B
test-driven-development addyosmani/agent-skills
Drives development with tests using the red-green-refactor loop. Use when implementing any logic, fixing any bug, or changing any behavior. Use when you need to prove that code wo…

78B
eval-driven-dev github/awesome-copilot
Improve AI application with evaluation-driven development. Define eval criteria, instrument the application, build golden datasets, observe and evaluate application runs, analyze…

78B
tdd yikart/AiToEarn
Test-driven development with red-green-refactor loop. Use when user wants to build features or fix bugs using TDD, mentions "red-green-refactor", wants integration tests, or asks…

78B
create-verification-skill cursor/plugins
Generate a project-local verification skill that drives your app the way a user does — any language, framework, or platform. Use for /create-verification-skill, "make a control sk…

78B
maintain-formal-verification-skill cursor/plugins
Bring a project's formal verification back in line with the code after the code changes: find the commits that touched verified code, update the model, harness, or properties to d…

78B
test-fixing davila7/claude-code-templates
Run tests and systematically fix all failing tests using smart error grouping. Use when user asks to fix failing tests, mentions test failures, runs test suite and failures occur,…

77B
spec-driven-eval tech-leads-club/agent-skills
Scores how completely an implementation fulfills a PRD/spec, case by case, and produces a single comparable final grade. Invoke only when explicitly named (e.g. run spec-driven-ev…

77B
frontend-checklist-global thedaviddias/Front-End-Checklist
Use when auditing or improving any frontend codebase against the full Front-End Checklist rule corpus through one entry point.

76B
test-driven-development davila7/claude-code-templates
You MUST use this before writing or changing any production code, including one-line fixes and when the user is in a hurry: a new feature, a bug fix, a refactor, a behavior change…

76B
testing garrytan/gbrain
Skill validation framework PLUS daily test-suite health and regression intelligence. Validates skill conformance (frontmatter, manifest coverage, resolver coverage). Runs the proj…

76B
fraimz Devin-AXIS/iPolloWork
create a fraimz, make fraimz, prove it works, frame proof, PR proof, validate experience, e2e evidence, fraimz.html. The full fraimz loop — frame the claim, drive the real app via…

76B
laravel-verification affaan-m/ECC
Verification loop for Laravel projects: env checks, linting, static analysis, tests with coverage, security scans, and deployment readiness. Use when verifying a Laravel project b…

75B
remove-ai-slops code-yeongyu/oh-my-openagent
Removes AI-generated code smells from branch changes or an explicit file list behind regression tests, including junk tests (prose pins, source greps, copied inventories, mock ech…

75B
visual-qa code-yeongyu/oh-my-openagent
Runs rigorous visual QA across web, terminal, and paginated surfaces: an Apple HIG-based checklist, paired light/dark captures at phone and desktop widths, screenshot evidence, an…

75B
pester-should-migration github/awesome-copilot
Experimental (preview) Pester skill for migrating classic Should -Be (v5) assertion syntax to the new Should-* (v6) assertions (note the hyphen, no space), e.g. `Should -Be` -> `S…

75B
godot-gdscript-headless-testing gamedev-skills/awesome-gamedev-agent-skills
Runs Godot 4.7 GDScript tests with godot --headless and a SceneTree runner that exits non-zero on failure, so CI can gate merges. Owns Godot tests in CI. Use for GitHub Actions jo…

75B
migrate-to-shoehorn mattpocock/skills
Migrate test files from `as` type assertions to @total-typescript/shoehorn. Use when user mentions shoehorn, wants to replace `as` in tests, or needs partial test data.

74B
verification-loop affaan-m/ECC
Run a six-phase verification of a Claude Code session's work — build, type check, lint, tests with coverage, security grep, and diff review — then produce a PASS/FAIL verification…

74B
testing-api-for-mass-assignment-vulnerability mukul975/Anthropic-Cybersecurity-Skills
Tests APIs for mass assignment (auto-binding), OWASP API3:2023, by identifying writable endpoints, adding undocumented fields to request bodies (role, isAdmin, price, balance), an…

74B
test-master Jeffallan/claude-skills
Generates test files, creates mocking strategies, analyzes code coverage, designs test architectures, and produces test plans and defect reports across functional, performance, an…

74B
dogfood mvschwarz/openrig
Systematically explore and test a web application to find bugs, UX issues, and other problems. Use when asked to "dogfood", "QA", "exploratory test", "find issues", "bug hunt", "t…

74B
vector-forge trailofbits/skills
Mutation-driven test vector generation. Finds implementations of a cryptographic algorithm or protocol, runs mutation testing to identify escaped mutants, then generates new test…

74B
daytona-recording-artifacts Devin-AXIS/iPolloWork
frame proof, HTML frames, screenshots, recording, PR proof, e2e evidence, validate visually. Daytona artifacts workflow for validated screenshots and optional videos.

74B
stitched-full-page-capture MengTo/Skills
Capture or repair reliable full-page screenshots for lazy-loaded, scroll-animated, Framer, WebGL/canvas, or reveal-heavy web pages. Use when full-page screenshots are blank, gray,…

74B
test-collaboration affaan-m/ECC
Inventory and govern a project's test assets. Connect requirements, business rules, risks, bugs, and cross-boundary contracts to stable TEST-IDs and executable evidence in the rep…

73B
playwright-e2e-builder davila7/claude-code-templates
Plan and build comprehensive Playwright E2E test suites with Page Object Model, authentication state persistence, custom fixtures, visual regression, and CI integration. Uses inte…

73B
senior-qa alirezarezvani/claude-skills
Write and improve tests for React or Next.js apps: Jest, React Testing Library, MSW mocks, Playwright E2E, coverage gaps. Use whenever the user asks to add tests to a component or…

73B
Development danielmiessler/LifeOS
Builds, tests, modifies and checks up on software against its ISA, from a one-file change to a giant system. Build turns intent into ISA criteria and makes them pass; Test proves…

73B
agent-first-screenshots Devin-AXIS/iPolloWork
Agent-first screenshots — an agent drives the real app via CDP and produces clean, defect-free product screenshots (newsletters, landing pages, social, decks, PR). Dual-channel ve…

73B
testing lobehub/lobehub
Use for Vitest tests, mocks, coverage and failing-test diagnosis.

72B
java-junit github/awesome-copilot
Write, review and fix Java unit tests with JUnit 5 and JUnit 6 (Jupiter), AssertJ and Mockito: assertions, parameterized and nested tests, mocking rules, deterministic time and ra…

72B
planning-oracle-to-postgres-migration-integration-testing github/awesome-copilot
Creates an integration testing plan for .NET data access artifacts during Oracle-to-PostgreSQL database migrations. Analyzes a single project to identify repositories, DAOs, and s…

72B
generate alirezarezvani/claude-skills
Use when asked to write Playwright or e2e tests for a page, component or feature ('write tests', 'add tests for', 'e2e test').

72B
tmux-real-user-testing QwenLM/qwen-code
This skill should be used when the user asks to "用 tmux 做真实测试", "保存 tmux 日志", "像真实用户一样测试 Qwen", "生成可复查的 TUI 测试报告", "测试 slash command 交互", or requests a tmux-based real user E2E ru…

72B
ruzzy trailofbits/skills
Sets up and runs Ruzzy, Trail of Bits' coverage-guided Ruby fuzzer and the only production-ready one for the language. Covers harness structure, fuzzing pure Ruby and the native C…

72B
vm-lab steipete/agent-scripts
Parallels macOS VM lab: GUI automation, Peekaboo, TCC, Ghostty.

72B
playwright-skill tech-leads-club/agent-skills
Complete browser automation with Playwright. Auto-detects dev servers, writes clean test scripts to /tmp. Test pages, fill forms, take screenshots, check responsive design, valida…

72B
dogfood callstackincubator/agent-skills
Systematically explore and test a mobile app on iOS/Android with agent-device to find bugs, UX issues, and other problems. Use when asked to "dogfood", "QA", "exploratory test", "…

72B
react-native-testing callstackincubator/agent-skills
Write tests using React Native Testing Library (RNTL) v13 and v14 (`@testing-library/react-native`). Use when writing, reviewing, or fixing React Native component tests. Covers: r…

72B
browser-qa affaan-m/ECC
Run automated post-deploy UI verification with a browser automation MCP (claude-in-chrome, Playwright, or Puppeteer): console-error and Core Web Vitals smoke checks, form and auth…

71B
acceptance lobehub/lobehub
Verify delivery outcomes on the real product, capture inspected evidence, and deliver an acceptance report with the lh CLI: published to LobeHub when signed in, or rendered as a l…

71B
alint-ruleset lobehub/lobehub
Maintain LobeHub's model-backed alint rule set in packages/alint: author a rule, calibrate its false positives against real source, decide its severity (warn vs error) from real P…

71B
mcp-release-qa github/awesome-copilot
Verify an MCP server before release by exercising a real protocol session, comparing runtime capabilities with source and documentation, testing failure paths, and recording repro…

71B
scaffolding-oracle-to-postgres-migration-test-project github/awesome-copilot
Scaffolds an xUnit integration test project targeting Oracle in .NET solutions. Creates the test project, transaction-rollback base class, and seed data manager. Use only during P…

71B
unit-test-vue-pinia github/awesome-copilot
Write and review unit tests for Vue 3 + TypeScript + Vitest + Pinia codebases. Use when creating or updating tests for components, composables, and stores; mocking Pinia with crea…

71B
exploiting-broken-function-level-authorization mukul975/Anthropic-Cybersecurity-Skills
Tests APIs for Broken Function Level Authorization (OWASP API5:2023) by identifying admin and privileged endpoints, then reaching them with regular-user credentials via HTTP metho…

71B
performing-api-rate-limiting-bypass mukul975/Anthropic-Cybersecurity-Skills
Tests API rate limiting for bypass vulnerabilities using Python (requests/aiohttp) and Burp Suite Turbo Intruder to manipulate headers (e.g. X-Forwarded-For spoofing), IPs, HTTP m…

71B
testing-api-for-broken-object-level-authorization mukul975/Anthropic-Cybersecurity-Skills
Tests REST and GraphQL APIs for Broken Object Level Authorization (BOLA/IDOR, OWASP API1:2023) by intercepting API calls, identifying object ID parameters (numeric IDs, UUIDs, slu…

71B
api-test-suite-builder alirezarezvani/claude-skills
Use when asked to write API, integration or contract tests for REST endpoints. Builds the suite from the routes: happy paths, auth, validation errors and edge cases per endpoint.

71B
translation-review Devolutions/UniGetUI
Reviews UniGetUI .json language files for localization quality, detects parity issues, English-equal entries, wrong-script content, and cross-language outliers, then generates a d…

71B
developer-device-platform-basics google/skills
Provides guidance and instructions on managing remote devices on Developer Device Platform (DDP). Use when reserving remote Android devices, establishing connection tunnels, check…

71B
benchmark-checklist cursor/plugins
Vet a perf measurement (limiter, tuning, limits, errors, repeatability, relevance, and whether the work happened) before you report or act on it. Use when you run a benchmark or r…

71B
maintain-verification-skill cursor/plugins
Periodic pass that keeps a project's verification skill and feature map honest: parallel source readers per feature, one live session driving every feature, at most one PR of prov…

71B
update-int-snapshots amir20/dozzle
Use when Playwright visual snapshots in e2e/visual.spec.ts-snapshots/ need to be regenerated after a UI change (logo, theme, layout, anything that affects rendered pixels) and the…

71B
replica-diff Jakeschincariol/replica-skill
Compares an app clone against the original: a feature parity score from the feature matrix (weighted by must, should, could) with the missing list in build order, plus a screensho…

71B
smoke nightly-labs/openbot
Start one or more local OpenBot dev instances and smoke test the features that the current changes or a pull request add. Use when asked to smoke test, QA, or check a change or PR…

71B
swift-testing-expert midudev/autoskills
Expert guidance for Swift Testing: test structure, #expect/#require macros, traits and tags, parameterized tests, test plans, parallel execution, async waiting patterns, and XCTes…

71B
greptimedb-fuzz-ci-failure-investigation GreptimeTeam/greptimedb
Investigate a failed GreptimeDB fuzz CI target link by downloading GitHub Actions job logs plus fuzz artifacts such as kind logs, monitor dumps, and CSV dumps, then correlate the…

71B
azure-microsoft-playwright-testing-ts microsoft/skills
Run Playwright tests at scale using Azure Playwright Workspaces (formerly Microsoft Playwright Testing). Use when scaling browser tests across cloud-hosted browsers, integrating w…

71B
springboot-verification affaan-m/ECC
Run the full Spring Boot verification loop — Maven or Gradle build, SpotBugs, PMD, and Checkstyle static analysis, unit and Testcontainers integration tests with JaCoCo coverage,…

70B
test-driven-development NousResearch/hermes-agent
TDD: enforce RED-GREEN-REFACTOR, tests before code.

70B
verify-paperclip paperclipai/paperclip
Verify Paperclip from a source checkout, published npm install, or existing staging or production stack. Select the environment, data state, version, and platform; drive real UI o…

70B
review-work code-yeongyu/oh-my-openagent
Post-implementation gate review: run manual QA on the real surface yourself, then launch ONE gate reviewer (never a panel) to audit goal, constraints, code quality, security, miss…

70B
cherry-regression-test CherryHQ/cherry-studio
Run Cherry Studio critical-path system regression tasks through the repository-owned Playwright E2E workflow. Use for full regression, release acceptance, development-branch syste…

70B
bug-receipt github/awesome-copilot
Close defects and incidents with a BUG RECEIPT and VERIFIED, PARTIAL, or BLOCKED status after diagnosis, repair, or recovery.

70B
sdd Yeachan-Heo/oh-my-claudecode
Spec-Driven Development. Interview → spec with acceptance criteria → plan → test-first execution. `/sdd full` runs the 6-phase pipeline instead.

70B
verify Yeachan-Heo/oh-my-claudecode
Verify that a change really works before you claim completion

70B
exploiting-api-injection-vulnerabilities mukul975/Anthropic-Cybersecurity-Skills
Tests API parameters, headers, and request bodies for injection flaws — SQL injection, NoSQL injection, OS command injection, LDAP injection, and SSRF — by crafting payloads tailo…

70B
testing-websocket-api-security mukul975/Anthropic-Cybersecurity-Skills
Tests WebSocket API implementations for missing upgrade-handshake authentication, Cross-Site WebSocket Hijacking (CSWSH), message injection, insufficient input validation, message…

70B
api-fuzzing-bug-bounty davila7/claude-code-templates
This skill should be used when the user asks to "test API security", "fuzz APIs", "find IDOR vulnerabilities", "test REST API", "test GraphQL", "API penetration testing", "bug bou…

70B
playwright-skill davila7/claude-code-templates
Complete browser automation with Playwright. Auto-detects dev servers, writes clean test scripts to /tmp. Test pages, fill forms, take screenshots, check responsive design, valida…

70B
qa-test-planner davila7/claude-code-templates
Generate comprehensive test plans, manual test cases, regression test suites, and bug reports for QA engineers. Includes Figma MCP integration for design validation.

70B
web-security-testing davila7/claude-code-templates
Web application security testing workflow for OWASP Top 10 vulnerabilities including injection, XSS, authentication flaws, and access control issues.

70B
ce-test-browser EveryInc/compound-engineering-plugin
Run browser tests for pages affected by the current branch or PR. Use when asked to run or check browser tests for the current change.

70B
genotoxic trailofbits/skills
Graph-informed mutation testing triage. Parses codebases with Trailmark, runs mutation testing and necessist, then uses survived mutants, unnecessary test statements, and call gra…

70B
m365-agent-evaluator microsoft/skills
Use this skill when a user wants to create, run, or analyze evaluation suites for Microsoft 365 Copilot declarative agents with the public @microsoft/m365-copilot-eval CLI. Trigge…

70B

Scores come from a snapshot of 300 public GitHub repositories taken on 12 November 2026. Every score is the result of fixed checks run by code; no AI is involved. How scoring works.