mcpField

Skills

96,981 packaged capabilities and playbooks for agents. Install any of them with one command.

Testing & quality

N
network_egress_test
network_egress_test
charpup / skill-security-auditor

Test skill for security scanning

Security45
N
network-penetration-testing
network-penetration-testing
aipentest / cyberstrikeai

The system of action for AI-native cybersecurity—where intent becomes governed execution, evidence becomes operational memory, and every operation improves the next

Security45
O
oma-docs
oma-docs
first-fluke / oh-my-agent

Check documentation references, sync docs to code changes, and

Development45
O
oma-refactor
oma-refactor
gracefullight / stock-checker

Restructure existing code while preserving observable behavior. Use for targeted technical debt or hotspot work with characterization tests.

Development45
O
online-evaluations
online-evaluations
langwatch / skills

Configure LangWatch online evaluations and guardrails for production traffic. Use when the user wants to score live traces or threads, monitor production quality, sample incoming traffic, or synchronously block unsafe requests and responses. Do not use for batch experiments.

Testing & quality45
P
performance-optimization
performance-optimization
magnus919 / agent-skills

Optimize software performance through user-journey baselines, profiling, representative benchmarks, controlled experiments, and field verification. Use when asked to make an application, service, workflow, or hot path faster or more efficient, or to build the measurement loop first. Do not use for a reliability incident, capacity forecast, generic product A/B test, or operating a named telemetry or load-testing tool without an optimization objective.

Development45
P
plan-tests
plan-tests
igmarin / rails-agent-skills

Use when choosing the first failing spec for a Rails change. One minimal example opens the gate. Trigger words: first failing test, what test first, TDD, spec selection.

Testing & quality45
P
prd-review
prd-review
jimweller / clanker-skills

Review a PRD for structural defects via a subagent.

Testing & quality45
P
principle-attack-the-premise
principle-attack-the-premise
q-qp-p / pstack

Apply when two or more fixes that share one premise have failed the same gate. Write the premise down and test it directly before you write another fix that assumes it.

Development45
P
prompt-optimize
prompt-optimize
gaasher / agent-loop-skills

Use when the user has a prompt that feeds a system they can already score, and wants that prompt automatically improved to raise the score against their own evaluation command. Makes one targeted quality edit per iteration — clarity, context, specificity, structure, examples, decomposition, guardrails — re-runs the user's eval to measure the metric, and keeps the edit only if the metric improves, else reverts; loops to a target, plateau, or budget. The metric is whatever the user's eval command prints (task accuracy, an LLM-judge score, a pass rate, a tool-call success rate); the loop is metric-agnostic and never edits the eval. Not for writing a prompt from scratch, not for tuning model weights or hyperparameters, and not for one-off manual prompt edits without a score.

Agent workflows45
P
pylint-checkers

Use when pylint checkers including built-in checkers, custom checkers, and checker development.

Testing & quality45
Q
quality-manager-qmr
quality-manager-qmr
ovachiever / droid-tings

Senior Quality Manager Responsible Person (QMR) for HealthTech and MedTech companies. Provides overall quality system responsibility, regulatory compliance oversight, management accountability, and strategic quality leadership. Use for quality system governance, regulatory compliance oversight, management responsibility, and quality strategic planning.

Testing & quality45
R
react-expert
react-expert
mizchi / skills

React specialist perspective for the weekly review. Focuses on hooks discipline, re-rendering, Suspense / RSC, and Context design. Opinionated on React idioms.

Testing & quality45
R
receiving-code-review
receiving-code-review
zenobi-us / dotfiles

Use when receiving code review feedback, before implementing suggestions, especially if feedback seems unclear or technically questionable - requires technical rigor and verification, not performative agreement or blind implementation

Testing & quality45
R
redteam-autoresearch
redteam-autoresearch
superagent-ai / skills

Run a bounded red-teaming autoresearch loop to generate LLM guardrail training data. You (the agent running the skill) are the attacker and the judge: you craft attacks and label every response. The only model the harness calls is the target under test, over any OpenAI-compatible API (OpenRouter, Moonshot/Kimi, Fireworks, Ubicloud, OpenAI, or custom), with its key in `.red-team/.env`. Every attempt (pass and fail) is written to JSONL ready for fine-tuning guardrails in Llama Guard format. Use when asked to red-team or stress-test an LLM for harmful content, jailbreaks, prompt injection, or backdoor/trigger behavior; to build a safe/unsafe dataset; or to mine novel attacks at scale. Complements the hacker skill (code/infra exploitability): this skill targets model behavior and produces data.

Security45
R
refactor-cleaner
refactor-cleaner
carvalab / k-skills

Use this skill to find and remove dead code, unused dependencies, duplicate logic, and unused exports using detection tools (knip, depcheck, ts-prune, deadcode, staticcheck). Trigger on "clean up dead code", "remove unused", "find dead code", "reduce bundle size", "dependency audit", or when the codebase feels bloated. For simplifying living code (readability, naming, complexity reduction) without detection tools, use code-simplifier instead. Use this skill during maintenance windows or before major refactors.

Development45
R
review-deep
review-deep
jimweller / clanker-skills

Whole-codebase deep audit running 27 parallel reviewers across OpenAI, Gemini, and Claude via opencode run, navigating the live tree with Serena, plus one ocr scan coverage pass.

Testing & quality45
R
review-maintainability
review-maintainability
doodledood / codex-workflow

Audit code for DRY violations, dead code, complexity, and consistency issues. Read-only analysis with actionable recommendations. Use before PR or for code quality review. Triggers: review maintainability, code quality, DRY, refactor review.

Testing & quality45
R
review-pr
review-pr
frostney / known-good-route

Resolves current pull-request review findings in place, validates and pushes fixes, and can autonomously converge and merge an opted-in pull request. Use when the user runs /review-pr or /review-pr automatic-merge.

Testing & quality45
R
review-work
review-work
tmdgusya / engineering-discipline

Use after run-plan completes to independently verify the implementation. Reads only the plan document and inspects the codebase from scratch — information-isolated from the execution context. Produces a structured review document with PASS/FAIL verdict. Triggers when the user says "review the work", "verify the implementation", "check if the plan was executed correctly".

Testing & quality45
R
ring:test-driven-development

Enforcing the RED-GREEN-REFACTOR loop: write one failing test and watch it fail, write minimal code to pass, then refactor green. Use when starting implementation of a new feature or bugfix, or writing any new production code. Requires pasted failure output as proof of RED; code written before its test must be deleted, not stashed. Skip for exploratory spikes or when only modifying existing tests.

Testing & quality45
R
run-tests
run-tests
managedcode / dotnet-skills

ALWAYS USE before running .NET tests or answering with a test command or flags. Trigger on "run the tests", "exact dotnet test command", one test/class/category/trait/target framework, combined filters, `--filter-query`, `--no-build`, `--diag`, diagnostic logs, TRX, coverage collection, crash/hang dumps, filter errors, or unrecognized options. Chooses repository-compatible classic, VSTest, bridged MTP, or native MTP syntax for MSTest/xUnit/NUnit/TUnit. DO NOT USE for platform identification alone (platform-detection), writing or debugging test code, interpreting an existing coverage report, CI investigation, migration, or a persistent hot reload/watch loop.

Testing & quality45
S
sanity-check
sanity-check
chmouel / lazyworktree

Run full quality check with live results

Testing & quality45
S
scaffold-project
scaffold-project
jayden-dang / skills

Produces a working repository skeleton in an empty directory — stack chosen, test

Development45
S
second-opinion
second-opinion
lwlee2608 / agent-skills

Use when the user asks for a second-opinion review from another agent (e.g., "get a second opinion", "review with pi", "review using gpt-6-astra", "/second-opinion"), or when review-code runs with `--second-opinion`. Runs a fresh pi session (or Claude Code, when already inside pi) on the review-code skill and relays its review.

Testing & quality45
S
security-review
icodecraft / anti-slop

Review code for security issues before merge — authz gaps, injection, secrets, unsafe defaults, SSRF, path traversal. Use when reviewing a PR, auditing a diff, shipping auth/payments/uploads, or when the user asks for a security review or OWASP check.

Security45
S
self-healing-ci
self-healing-ci
pskoett / pskoett-ai-skills

CI-only self-healing workflow using gh-aw (GitHub Agentic Workflows) for active runtime recovery on pull requests and scheduled runs. When a CI check fails (test, build, lint, deploy, scan), this skill diagnoses the failure from CI logs, proposes a verified patch as a PR comment or follow-up commit, and commits a HEAL entry to `.learnings/HEALS.md`. Verify-before-persist discipline preserved: a HEAL is only `verified` if a re-run check passes in the same workflow; otherwise it ships as `pending-verify` for human follow-up. Recurrent heal patterns across PRs accumulate `Recurrence-Count` and append a `Handoff` block at ≥3 to flag promotion via self-improvement-ci. Use this skill when: you want headless heal-loop execution in CI/scheduled pipelines, you want recurring failure patterns captured automatically, or you want PRs that surface non-obvious environmental / tooling fixes without human triage. For interactive/local sessions, use `self-healing` instead.

Development45
S
setup
setup
clickhouse / clickhouse-js

Set up the `clickhouse-js` repository in a fresh checkout so the agent can run tests, lints, type checks, builds, or examples. Use this skill before invoking any `npm run test:*`, `npm run lint`, `npm run typecheck`, `npm run build`, or `npm run run-examples` script — or after pulling changes that touch any `package.json` (root, `examples/node`, or `examples/web`). Covers Node.js version requirements, installing dependencies across the npm workspaces and the two independent example packages, building the workspace packages so inter-package imports resolve, and starting ClickHouse via Docker Compose for integration tests. Do NOT use this skill for downstream user projects that merely depend on `@clickhouse/client` or `@clickhouse/client-web`; it is specific to contributing to the `ClickHouse/clickhouse-js` repo itself.

Development45
S
ship-it
ship-it
timlai666 / skills

Prepare a feature branch for a pull request: verify scope, sync when needed, test, review, push and open or update the PR. This skill MUST be used when the user requests this branch-to-PR workflow or explicitly invokes ship-it (開 PR、準備 PR、整理分支交付). It SHOULD be used when the user asks to prepare a completed feature for review. It MUST NOT be triggered solely by a push, merge, release, deployment request or a general readiness question.

Development45
S
skill-self-improvement

Self-improvement for MoltBot skills. Create, review, and improve own skills with quality control. Git-managed like Claude Code.

Agent workflows45
S
sl-exe-app-review

No description yet

Testing & quality45
S
solo-review
solo-review
fortunto2 / solo-factory

Use when "review code", "quality check", "is it ready to ship", "final review", or after /build or /deploy completes. Do NOT use for planning (/plan) or building (/build).

Testing & quality45
S
sonar-coverage
sonar-coverage
sonarsource / sonarqube-agent-plugins

Find files with low test coverage and inspect uncovered lines in a SonarQube project (project key optional when MCP integration already defines the default project)

Testing & quality45
S
sonar-fix-issue
sonar-fix-issue
sonarsource / sonarqube-agent-plugins

Fix a specific SonarQube issue in code by rule key and location

Testing & quality45
S
spec-critique
spec-critique
oimiragieo / agent-studio

Self-critique specification documents using extended thinking — surfaces hidden assumptions, contradictions, missing edge cases, and scope creep before implementation

Development45
S
spec-inspect
spec-inspect
anyoneanderson / agent-skills

Specification quality checker for spec-generator documents. Validates requirement.md, design.md, tasks.md for consistency, completeness, and quality. Detects requirement ID mismatches, missing sections, contradictions, and ambiguous expressions. English triggers: "inspect specs", "check specification quality", "validate requirements" 日本語トリガー: 「仕様書を検査」「品質チェック」「仕様を検証」「spec-inspect実行」

Testing & quality45
S
spring-mvc-testing
spring-mvc-testing
spring-ai-community / spring-testing-skills

Boot 4+ replaced MockMvc assertions with MockMvcTester — incompatible API your training data gets wrong. Read before writing any @WebMvcTest. Triggers: @WebMvcTest, MockMvc, MockMvcTester, @RestController, jsonPath, @GetMapping, @PostMapping, @AutoConfigureMockMvc, MockMvcRequestBuilders, status().isOk(), @RestControllerAdvice, contentType(APPLICATION_JSON).

Testing & quality45
S
stably-sdk-setup
stably-sdk-setup
stablyai / agent-skills

Expert setup assistant for the Stably Playwright SDK. Use this skill when installing Stably SDK in a new project, migrating from @playwright/test, or configuring Stably reporter for CI/CD. Triggers on tasks like "setup stably", "install stably sdk", or "configure playwright with stably".

Testing & quality45
S
state-sweep
state-sweep
tranz007 / ux-skills

Find missing interface and service states such as loading, empty, partial, permission, timeout, stale data, validation, failure, interruption, and recovery. Use when a designer asks what states or edge cases are missing from a screen, component, journey, or feature.

Design & UI45
S
support-quality-qa-review
support-quality-qa-review
sylphxai / skills

Design and audit customer support quality assurance, ticket review scorecards, macro quality, escalation correctness, refund/support fairness, tone, evidence handling, coaching loops, calibration, automation QA, and support health metrics. Use when improving support operations for SaaS, apps, games, marketplaces, developer tools, billing, trust, or community products.

Testing & quality45
S
svelte5
svelte5
joshuadavidthomas / agent-skills

Reviews Svelte components for idiomatic patterns, identifies anti-patterns carried over from React/Vue/Svelte 4, and suggests Svelte 5 refactorings. Use when writing or reviewing Svelte components, asking "is this idiomatic", "Svelte way", doing Svelte 5 migration, or encountering smells like: effect assigns state, prop copied to $state, global store by default, $bindable everywhere, clickable div, createEventDispatcher, export let, on:click, slot-shaped APIs, lifecycle-driven code, imperative DOM wiring, immutable-update ceremony, context value replacement, shadcn-svelte form structure, Field.* components, bits-ui form controls, or component APIs that hide ownership. This is the general-purpose entry point for Svelte component review; delegates to sveltekit for routes/load/actions/server concerns and to focused references for details.

Development45
T
tdd
tdd
marcioaltoe / skills

Test-driven development. Use when the user wants to build features or fix bugs test-first, mentions "red-green-refactor", or wants integration tests.

Testing & quality45
T
team-iterdev
team-iterdev
catlog22 / claude-code-workflow

Unified team skill for iterative development team. Pure router — all roles read this file. Beat model is coordinator-only in monitor.md. Generator-Critic loops (developer<->reviewer, max 3 rounds). Triggers on "team iterdev".

Development45
T
tenzir-review-changes
tenzir-review-changes
tenzir / skills

Review and address code changes in Tenzir projects. Use when auditing diffs or pull requests for bugs, security issues, missing tests, documentation drift, readability problems, performance regressions, user experience issues, or when handling pull request review comments, especially implementing requested changes, replying to reviewers, resolving GitHub review threads, or verifying that review feedback has a final state. Also use this skill whenever the user says "review", "look at this PR", "check my changes", "audit this diff", "address the review findings", or "resolve PR comments".

Testing & quality45
T
test-driven-investigation
test-driven-investigation
cloudflare / workerd

Use when investigating bugs, crashes, assertions, or unexpected behavior - requires writing a reproducing test early instead of over-analyzing source code; concrete experiments over mental models

Testing & quality45
T
testing-ops
testing-ops
0xdarkmatter / claude-mods

Cross-language testing strategies and patterns. Triggers on: test pyramid, unit test, integration test, e2e test, TDD, BDD, test coverage, mocking strategy, test doubles, test isolation.

Testing & quality45
T
testing
testing
redpanda-data / console

Write and maintain tests with Vitest v4 dual configuration, mock utilities, and Zustand store testing patterns.

Testing & quality45
T
theme-audit
theme-audit
chmouel / lazyworktree

Validate all themes for completeness and correct usage

Testing & quality45
U
uloop-screenshot
uloop-screenshot
hatayama / unity-cli-loop

Capture Unity Editor windows or Game View rendering as PNG. Use for visual checks, debugging, documentation, or annotated UI element coordinates.

Development45
V
verify-patterns
verify-patterns
aurite-ai / agent-verifier

Verify AI agent patterns including loop safety, retry limits, tool consistency, context size, and graph cycle analysis. Use when asked to "verify agent patterns", "check loops", "verify tools", or "check retry limits".

Testing & quality45
V
verify-security
verify-security
aurite-ai / agent-verifier

Verify code for security issues including hardcoded secrets, input validation, error exposure, and dependency vulnerabilities. Use when asked to "verify security", "check for secrets", or "scan for vulnerabilities".

Security45
V
visual-regression-testing
visual-regression-testing
jgtolentino / insightpulse-odoo

Comprehensive visual regression testing using Playwright and jest-image-snapshot. Implements screenshot comparison, baseline management, CI/CD integration, and visual diff reporting following Ant Design best practices. Use for preventing visual bugs, ensuring UI consistency, and automating visual QA. (project)

Testing & quality45
V
vitest
vitest
dobroslavradosavljevic / skills

Build, review, debug, configure, migrate, teach, or plan Vitest testing with current docs and a full usage guide. Use for vitest 5, vitest.config, defineConfig from vitest/config, describe/it/test/expect, vi mocks, vi.when, snapshots, coverage (@vitest/coverage-v8), browser mode (@vitest/browser-playwright), projects, pools/maxWorkers, reporters, UI, bench fixture, typecheck, vitest doctor, fsModuleCache, and Jest / Vitest 3→4 / 4→5 migration.

Testing & quality45
V
vitest-testing-patterns

Use when vitest testing patterns including unit tests, mocks, spies, and browser mode testing.

Testing & quality45
W
woocommerce-stale-pr-audit
woocommerce-stale-pr-audit
woocommerce / agent-skills

Audit a fixed cohort of inactive WooCommerce pull requests against current trunk, linked issues, review history, repository labels, and representative user flows, then produce evidence-backed actions and a private checklist report. Use for stale or backlog PR cohort reviews, not ordinary single-PR code review.

Testing & quality45
W
writing-gate-checker
writing-gate-checker
zjp1997720 / content-twin-toolkit

Hard-gate writing auditor. Use to independently audit the hard gates of a writing workflow before formally outputting the final article. Trigger scenarios: - a draft already exists and you are about to produce the formal final version - the project is located at `01_项目/内容创作/` - you need to verify artifacts such as Claim Ledger, Module Budget, Lint Report, Final Candidate Core capabilities: - independently check whether artifacts are complete - check whether form hard thresholds are exceeded - check whether claims match the body text - output `PASS / FAIL` and write it to `03-Reviews/Gate-Check-Report.md`

Creative & media45
W
writing-skills
writing-skills
zenobi-us / dotfiles

Teaches test-driven skill authoring and validation, when creating/editing/verifying skills, resulting in robust reusable skills that pass pressure-tested scenarios

Agent workflows45
A
acceptance-check
acceptance-check
jayden-dang / skills

Use before merging or finishing a branch, when a feature's unit tests are

Testing & quality44
A
aif-qa-check
aif-qa-check
lee-to / ai-factory

Executes QA test cases created by /aif-qa in human-guided or automated-agent mode, including reusable browser replay scripts. Use when you need to walk through QA one case at a time, record pass/fail results, or have an agent verify and rerun cases through browser, CLI, API, automated tests, or file/document checks.

Testing & quality44
A
atelier-greenfield
atelier-greenfield
vdelacou / atelier

Stand up a NEW Bun/TypeScript, Next.js, or Java (Quarkus) repo to the atelier standard from zero — scaffold the Clean Architecture (or Atomic Design) layout, copy the gate assets, wire the git hooks, write the build scripts, lay a minimal green walking skeleton, and prove every gate passes before the first commit. Use when starting a fresh repo or a new monorepo package from scratch — say "scaffold a new Bun repo", "bootstrap a new project to the standard", "set up a new atelier repo / Next.js package", or "scaffold a new Java/Quarkus service". Greenfield only. NEVER use it for work inside an existing codebase (adding features, setting up lint or tooling, config changes) — those belong to the main atelier skill, or to atelier-review-me adopt mode for bringing a brownfield repo up to the standard.

Development44
10381–10440 of 11,845

New to MCP?

From what the protocol is to installing your first server, these answers cover most first questions.

An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.