Explore semgrep rule variant creator as a testing & qa workflow from trailofbits/skills. Compare its source, maintenance and review signals before choosing it for your agent.
This source provides a task-specific instruction workflow for Testing & QA. Its source file is linked below so you can inspect the exact procedure, tools and dependencies. A full editorial review has not been completed.
Exploring Testing & QA workflows with an agent. Confirm that the source matches your task and environment.
The automated catalog record does not establish task performance or runtime safety. Check supporting scripts and external services in the source before use.
Unknown; inspect source requirements and supporting scripts.
First time installing a skill? Follow the walkthrough →
Inspect the pinned source snapshot and its supporting files first. The command selects this skill through the open-source skills CLI. Node.js and agent-specific setup may be required. Installation can download code. Catalog ingestion never executes skill instructions or install scripts.
npx skills add https://github.com/trailofbits/skills/tree/2be6433b39e009cd2b6fd3be1895f6b1faa5af9a/plugins/semgrep-rule-variant-creator/skills/semgrep-rule-variant-creator --skill semgrep-rule-variant-creatorReview pinned skill folder ↗ · CLI documentation ↗
After source review, use npx skills check and npx skills update to inspect and apply upstream updates. Re-check changed instructions before running them.
Static review only. This is not a security audit or a guarantee of safety.
SKILL.md text only; scripts, dependencies and runtime behavior not audited.
Allowed tools declaration: Bash Read Write Edit Glob Grep WebFetch Workflow. Runtime permissions and network behavior: Unknown.
86/100 · Metadata coverage 100% · Model 1.0
Scores summarize observable discovery signals. Popularity and repository activity apply to the whole repository. Unknown runtime safety earns no certification.
Related by category; compare scope and dependencies before choosing an alternative.
A test-first workflow for turning a specific behavior requirement into an observable failing case and a focused implementation.
Repository star change: +698 over 26.7 hours. 2026-11-01
A completion-check workflow that ties a claim such as fixed, passing or deployed to fresh evidence from the relevant system.
Repository star change: +698 over 26.7 hours. 2026-11-01
A browser-testing workflow with Playwright-oriented examples and server-lifecycle helpers for checking local web application behavior.
Repository star change: +586 over 26.7 hours. 2026-11-01
A security-focused change review that connects a diff with history, affected callers, test coverage and explicit findings.
Repository star change: +26 over 26.7 hours. 2026-11-01
A testing guide for meaningful invariants, generated input domains and interpreting minimized counterexamples.
Repository star change: +26 over 26.7 hours. 2026-11-01
A dependency-risk workflow examining resolved versions, advisories, upstream maintenance, publisher concentration and install-time scripts.
Repository star change: +26 over 26.7 hours. 2026-11-01
Category-based discovery candidates. Inspect overlap, permissions and requirements; these combinations have not been integration-tested.
A Claude Code plugin for choosing and reviewing property-based tests, including counterexample triage across several language ecosystems.
Explore math-olympiad as an agent plugin package for testing & qa. Review its supported format, bundled components and setup requirements before installing.
Explore agent-regression-evals as an agent plugin package for testing & qa. Review its supported format, bundled components and setup requirements before installing.
Category-based discovery candidates. Inspect overlap, permissions and requirements; these combinations have not been integration-tested.
An MCP browser-automation connection for inspecting page structure and performing reviewable actions in a controlled browser session.
Explore air as an MCP connection for testing & qa. Compare the declared transport, package requirements and source evidence before connecting an agent.
Explore 0s and 1s CIS calculators as an MCP connection for testing & qa. Compare the declared transport, package requirements and source evidence before connecting an agent.