All categories
Testing & QA
Unit tests, integration tests, E2E, QA, validation, and test automation
- 31,094
- 1,296
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse testing & qa skills
Showing 1,921–1,944 of 31,094 skills
- Skill Tool Capability Fallback Routing TestUse when a workflow depends on optional search, browser, filesystem, or test capabilities to create or update a capability-to-fallback table with prohibited substitutions. Use the configured search, fetch, read, browser, and test capabilities only when available and authorized. Success criterion: the agent either uses an authorized equivalent or stops with a precise missing-capability request. Preserve evidence and a run record, limit rework to three meaningful passes, and obtain approval bef...Votes: 0GitHub stars: 2
- Skill Discovery And Supply Chain ReviewUse when a user asks to find, compare, or add agent skills from a URL list, registry, or repository to check candidate relevance, source identity, license, entry-point format, dependencies, and side effects before importing; keep provenance and never run setup scripts by default. Trigger for skill discovery, evaluation, or installation.Votes: 0GitHub stars: 2
- Parallel FindallUse when a task involves using a configured entity-discovery service to find records matching a natural-language description to identify the intended outcome, relevant inputs, platform or version, sensitive data, and permission boundary before acting. Use current primary documentation for version-sensitive behavior, produce a reviewable artifact, and verify it against stated criteria. Trigger for planning, implementation, evaluation, or troubleshooting in this focused domain; do not install o...Votes: 0GitHub stars: 2
- Mcp Skills Extension Interoperability ReviewUse when exposing, discovering, or loading Agent Skills through the MCP Skills extension `io.modelcontextprotocol/skills` to review capability declaration, skills/list and skills/get, resource manifests, URI identity, digest verification, cache origin, directoryRead support, user approval, and activation behavior. Success means skill content is loaded only from its approved server and verified manifest, and reading a SKILL.md is not mistaken for permission to activate or execute it.Votes: 0GitHub stars: 2
- Mcp Resource Cache Subscription Boundary ReviewUse when designing or auditing MCP resources, paginated discovery, response caching, or change subscriptions, especially when visibility depends on the caller’s authorization to review resource URIs, cache keys, TTL, public/private scope, pagination, invalidation, subscription filters, and reconnect behavior. Success means private data cannot cross authorization contexts, stale results are invalidated or refreshed appropriately, and cursors and subscription IDs are handled as opaque protocol ...Votes: 0GitHub stars: 2
- Mcp Deprecated Feature Migration PlanUse when upgrading an MCP client, server, SDK, or deployment and identifying protocol features that are deprecated in the target revision to produce a versioned inventory, migration plan, compatibility window, owners, and regression tests. Success means each deprecated use is mapped to the current migration path, new code does not adopt deprecated behavior by default, and existing clients remain supported only through an explicit, tested transition plan. Recheck the live deprecation registry ...Votes: 0GitHub stars: 2
- Gh Aw Untrusted Issue Content Injection DefenseUse when a task involves testing defenses against instructions embedded in GitHub issue or discussion content to record the product, runtime and repository version, identity, trust boundary, data sensitivity, controlling artifact, owner, and approval scope before applying the method. Distinguish documented behavior from tested behavior, verify with a bounded reproducible case, preserve provenance, and report compatibility and uncertainty. Do not install, grant access, send external writes, or...Votes: 0GitHub stars: 2
- Documentation Automation Linkcheck GateUse when an automation edits docs from source changes or repository events to create or update a documentation diff and link-check report. Use the configured search, fetch, read, browser, and test capabilities only when available and authorized. Success criterion: all changed claims match source evidence and changed links resolve in the intended site. Preserve evidence and a run record, limit rework to three meaningful passes, and obtain approval before externally visible or irreversible writes.Votes: 0GitHub stars: 2
- Copilot Cli Project Instruction Injection TestUse when a task involves testing whether untrusted repository content can masquerade as authoritative agent instructions to record the product, runtime and repository version, identity, trust boundary, data sensitivity, controlling artifact, owner, and approval scope before applying the method. Distinguish documented behavior from tested behavior, verify with a bounded reproducible case, preserve provenance, and report compatibility and uncertainty. Do not install, grant access, send external...Votes: 0GitHub stars: 2
- Safe Output Count And Target Policy CheckUse when an agent prepares structured outputs for a separate write stage to create or update a safe-output validation report with count, target, and allowed fields. Use the configured search, fetch, read, browser, and test capabilities only when available and authorized. Success criterion: all outputs pass the configured policy before any write job runs. Preserve evidence and a run record, limit rework to three meaningful passes, and obtain approval before externally visible or irreversible w...Votes: 0GitHub stars: 2
- Resume Session Permission RevalidationUse when a task continues in a new session, agent, branch, or workspace to create or update a resume record of identity, scope, tool permissions, and approvals. Use the configured search, fetch, read, browser, and test capabilities only when available and authorized. Success criterion: all remaining actions fit the current session’s active permission boundary. Preserve evidence and a run record, limit rework to three meaningful passes, and obtain approval before externally visible or irrevers...Votes: 0GitHub stars: 2
- Read Only To Write Capability Escalation ReviewUse when a workflow moves from investigation to editing or an external action to create or update a read/write boundary plan with target paths, payload, and approval point. Use the configured search, fetch, read, browser, and test capabilities only when available and authorized. Success criterion: the write is necessary, scoped, reversible where possible, and explicitly authorized. Preserve evidence and a run record, limit rework to three meaningful passes, and obtain approval before external...Votes: 0GitHub stars: 2
- Issue Body Untrusted Instruction Triage BoundaryUse when an event-driven agent reads user-submitted issue content to create or update a triage record separating trusted workflow rules from quoted issue data. Use the configured search, fetch, read, browser, and test capabilities only when available and authorized. Success criterion: classification is based on repository evidence and the issue schema, not embedded commands. Preserve evidence and a run record, limit rework to three meaningful passes, and obtain approval before externally visi...Votes: 0GitHub stars: 2
- Human Escalation Evidence Packet BuilderUse when the next safe action depends on a human judgment or approval to create or update a packet with decision, options, evidence, risk, and exact approval needed. Use the configured search, fetch, read, browser, and test capabilities only when available and authorized. Success criterion: a human can decide without repeating the investigation. Preserve evidence and a run record, limit rework to three meaningful passes, and obtain approval before externally visible or irreversible writes.Votes: 0GitHub stars: 2
- Human Approval GatesUse when a proposed agent action can publish, delete, purchase, send, deploy, change access, expose data, or otherwise cause material external effects to classify risk, request specific human approval before gated actions, show exact scope, and verify the result. Trigger before irreversible, costly, sensitive, or third-party-impacting operations.Votes: 0GitHub stars: 2
- External Write Preview Hash Approval CheckUse when an agent prepares to publish, submit, comment, or create a remote artifact to create or update a preview digest, target identity, and approval record. Use the configured search, fetch, read, browser, and test capabilities only when available and authorized. Success criterion: the submitted payload and destination match the approved preview exactly. Preserve evidence and a run record, limit rework to three meaningful passes, and obtain approval before externally visible or irreversibl...Votes: 0GitHub stars: 2
- Agent Pr Changed Path Allowlist VerifierUse when an agent proposes a patch, branch update, or pull request to create or update a changed-path report matched against an explicit allowlist. Use the configured search, fetch, read, browser, and test capabilities only when available and authorized. Success criterion: every changed path is permitted or the patch is blocked for review. Preserve evidence and a run record, limit rework to three meaningful passes, and obtain approval before externally visible or irreversible writes.Votes: 0GitHub stars: 2
- Web Quotation Context Boundary AuditUse when a draft paraphrase or quotation may have been shortened or detached from context to create or update a quote-to-claim mapping with the relevant surrounding passage. Use the configured search, fetch, read, browser, and test capabilities only when available and authorized. Success criterion: the quotation and paraphrase retain the original limitation and polarity. Preserve evidence and a run record, limit rework to three meaningful passes, and obtain approval before externally visible ...Votes: 0GitHub stars: 2
- Web Claim Source Date Freshness AuditUse when a claim concerns current versions, prices, policy, availability, release status, or deadlines to create or update a dated claim-source table with as-of date and update signal. Use the configured search, fetch, read, browser, and test capabilities only when available and authorized. Success criterion: the source is valid for the requested date or the claim is explicitly time-bounded. Preserve evidence and a run record, limit rework to three meaningful passes, and obtain approval befor...Votes: 0GitHub stars: 2
- Redirected Source Canonical Url AuditUse when a source URL redirects, canonicalizes, or changes host during retrieval to create or update a redirect record containing requested URL, final URL, and reason for substitution. Use the configured search, fetch, read, browser, and test capabilities only when available and authorized. Success criterion: the final destination is relevant and its identity is transparent in the record. Preserve evidence and a run record, limit rework to three meaningful passes, and obtain approval before e...Votes: 0GitHub stars: 2
- Multi Chunk Fetch Completeness LedgerUse when a fetched page reports additional chunks or is truncated before its relevant section to create or update a chunk ledger with expected, fetched, and still-missing ranges. Use the configured search, fetch, read, browser, and test capabilities only when available and authorized. Success criterion: all chunks needed for the question are present or the result clearly says review is partial. Preserve evidence and a run record, limit rework to three meaningful passes, and obtain approval be...Votes: 0GitHub stars: 2
- Verification And StoppingUse when an agent must prove that a deliverable meets an objective before claiming completion to turn goals into observable checks, choose independent evidence, define pass and fail thresholds, and state explicit stop conditions. Trigger for code, research, data, documents, and long-running agent work where plausible output is not sufficient evidence.Votes: 0GitHub stars: 2
- Success Signal Repeatability Cross Run CheckUse when a task completion depends on a nondeterministic metric or one-off visual check to create or update a repeated-result table with environment and variance. Use the configured search, fetch, read, browser, and test capabilities only when available and authorized. Success criterion: the signal is reproducible within an agreed tolerance or marked unstable. Preserve evidence and a run record, limit rework to three meaningful passes, and obtain approval before externally visible or irrevers...Votes: 0GitHub stars: 2
- Skill Workflow Exit Evidence Contract TestUse when a procedure ends with “done” but lacks a checkable exit condition to create or update an exit-contract table mapping each outcome to evidence and stop reason. Use the configured search, fetch, read, browser, and test capabilities only when available and authorized. Success criterion: every success state has a concrete observation and every failure state has a bounded route. Preserve evidence and a run record, limit rework to three meaningful passes, and obtain approval before externa...Votes: 0GitHub stars: 2