idor-testing
Professional skills and methodology for IDOR insecure direct object reference testing
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-22 00:14
Testing & quality
12,484 results
update-changelog
Update docs/CHANGELOG.md from git history, GitHub releases, and code diffs. Use when: writing release notes, syncing the latest changelog entry, summarizing a…
zod-testing
Testing patterns for Zod schemas using Jest and Vitest. Covers schema correctness testing, mock data generation, error assertion patterns, integration testing…
meta-mental-models
Apply a latticework of mental models from multiple disciplines to improve decision quality. Use this skill when the user needs to think more clearly, avoid…
hackathon-test-generator
Generate demo-path test cases and a manual verification checklist to prevent demo failures during judging.
team-lifecycle-v4
Full lifecycle team skill — plan, develop, test, review in one coordinated session. Role-based architecture with coordinator-driven beat model. Triggers on…
llm-evaluation
Implement comprehensive evaluation strategies for LLM applications using automated metrics, LLM-as-judge, human feedback, and benchmarking. Use when testing…
dotnet-quality
.NET code quality with Roslyn analyzers, StyleCop, and dotnet format. Covers linting, formatting, and best practices for C#/.NET. USE WHEN: user works with…
github-action
Sets up and debugs the Crowdin GitHub Action (crowdin/github-action), which syncs a repository with a Crowdin project and opens the translation pull request.…
tsdown
Build, review, debug, configure, migrate, teach, or plan tsdown 0.23 library bundling with current docs and a full usage guide. Use for tsdown, tsdown.config,…
turborepo
Build, review, debug, configure, migrate, teach, or plan Turborepo 2.11 monorepos with current docs and a full usage guide. Use for turbo, create-turbo,…
run-device-tests
Build and run .NET MAUI device tests locally with category filtering. Supports iOS, MacCatalyst, Android on macOS; Android, Windows on Windows. Use TestFilter…
playwright-testing
This skill should be used when user asks about "Playwright", "responsiveness test", "test with playwright", "test login flow", "file upload test", "handle…
automated-e2e-testing
Turn manual cases into Playwright E2E automation run in a browser: page objects, helpers, bug evidence, reports. Not for: API tests, exploratory sessions, bug…
bug-analysis
Use when performing root cause localization, impact analysis, and regression recommendations for confirmed Bugs—reproduce → read code to locate root cause → five-facet impact analysis → regression recommendations, with entries (five extended fields: root cause / impact / Severity basis / fix recommendation / regression recommendation) persisted as Bug entries. Not for: merely collecting Bug evidence (automated-e2e-testing /…
exploratory-testing
Exploratory testing sessions when requirements are vague or docs are missing — charter-driven; outputs system understanding, risks, test ideas. Not for:…
test-case-review
Review existing test cases (legacy, others', AI) for coverage and executability: build a testable-points baseline, assess independently, revise in place with…
accessibility-selenium-testing
Accessibility testing toolkit using Selenium WebDriver 4+ with Java 21+ and axe-core engine. Use when asked to validate WCAG 2.2 AA compliance, scan pages or…
sox-compliance
When the user wants to plan or execute SOX 404 control testing, select audit samples, build testing workpapers, or classify control deficiencies. Also use when…
honey-gain
Show Honey's benchmark scoreboard — the committed quality and token results per task tier (code, user-facing, agent-to-agent) from bench/. Reports only the…
tdd
Test-driven development. Use when the user wants to build features or fix bugs test-first, mentions "red-green-refactor", or wants integration tests.
using-creed
Use when starting any conversation in a Creed-enabled workspace, or when unsure which Creed skill applies, before any creative, test, debug, or ship work.
tilt
This skill should be used when the user asks to "write a Tiltfile", "configure Tilt", "set up live update", "debug Tilt", "add a resource to Tilt", "optimize…
test-service
Use when writing RSpec for a service object under spec/services/. Test the public .call contract. Trigger words: service spec, test service object,…