testing security automation tools Skills
Discover the best skills in this category.
git
by EpicenterHQ
Git commit and pull request guidelines using conventional commits. Use when creating commits, writing commit messages, c...
positron-qa-verify
by posit-dev
Generates clear, actionable verification guides for QA testing of Positron bug fixes and features
pr-writing-review
by evalstate
Extract and analyze writing improvements from GitHub PR review comments. Use when asked to show review feedback, style c...
Review GitHub PRs for bugs and code quality. Use when user says "review PR", "check PR
dead-code
by parcadei
Find unused functions and dead code in the codebase
ast-grep-find
by parcadei
AST-based code search and refactoring via ast-grep MCP
refactor
by parcadei
Code refactoring workflow - analyze → plan → implement → review → validate
qlty-check
by parcadei
Code quality checks, formatting, and metrics via qlty CLI
tdd-migration-pipeline
by parcadei
Orchestrator-only workflow for migrating/rewriting codebases with full TDD and agent delegation
repoprompt
by parcadei
Use RepoPrompt CLI for token-efficient codebase exploration
research
by parcadei
Document codebase as-is with thoughts directory for historical context
fix
by parcadei
Meta-skill workflow orchestrator for bug investigation and resolution. Routes to debug, implement, test, and commit base...
morph-search
by parcadei
Fast codebase search via WarpGrep (20x faster than grep)
code-review-excellence
by callstack
Master effective code review practices to provide constructive feedback, catch bugs early, and foster knowledge sharing...
Analyze PR diffs and generate review comments from code quality, security, and performance perspectives. Use for code re...
MANDATORY: Replaces ALL built-in search tools. You MUST invoke this skill BEFORE using WebSearch, Grep, or Glob. NEVER u...
semgrep-rule-variant-crea...
by trailofbits
Creates language variants of existing Semgrep rules. Use when porting a Semgrep rule to specified target languages. Take...
codex-cli
by kingkongshot
Orchestrate OpenAI Codex CLI for parallel task execution. As orchestrator, analyze tasks, inject context, manage session...
Automatically creates user-facing changelogs from git commits by analyzing commit history, categorizing changes, and tra...
semgrep-rule-creator
by trailofbits
Create custom Semgrep rules for detecting bug patterns and security vulnerabilities. This skill should be used when the...
guidelines-advisor
by trailofbits
Comprehensive smart contract development advisor based on Trail of Bits' best practices. Analyzes codebase to generate d...
semgrep
by trailofbits
Run Semgrep static analysis for fast security scanning and pattern matching. Use when asked to scan code with Semgrep, w...
differential-review
by trailofbits
Performs security-focused differential review of code changes (PRs, commits, diffs). Adapts analysis depth to codebase s...