← All skill packs

Testing & Security Skills

Skill pack
14 skills0 selected
pramodduttaSkills in this pack

Comprehensive WCAG compliance and accessibility testing covering ARIA, keyboard navigation, screen readers, color contrast, and automated a11y validation.

English

Validate authorization failures including IDOR, privilege escalation, and missing access controls. Test by attempting unauthorized access with lower-privileged credentials. Use when testing CWE-639 (IDOR), CWE-269 (Improper Privilege Management), CWE-862 (Missing Authorization), CWE-863 (Incorrect Authorization), CWE-284 (Improper Access Control), CWE-285 (Improper Authorization), or CWE-425 (Direct Request / Forced Browsing) findings.

English

Generate contract tests for API migrations with consumer-driven contracts and provider…

English

Test cross-browser compatibility on Chrome, Firefox, Safari, and Edge using Playwright. Use when ensuring browser compatibility or fixing browser-specific issues.

English

Expert Cypress testing framework integration for browser-based end-to-end…

English

Detect dark mode rendering issues including contrast failures, missing theme tokens, image inversions, and transition glitches across components.

English

Guidance for running and debugging tests in Docker environments for FastAPI + Vue/Tailwind projects.

English

Expert guidance for testing and validating GitHub Actions workflows before deployment - catches cache errors, path issues, monorepo dependencies, and service container problems that local testing…

English

Use when writing tests with Bun's built-in test runner. Covers test organization, assertions, mocking, and snapshot testing using Bun's fast test infrastructure.

English

k6 load testing expertise for performance validation and…

English

Use when reviewing code for security vulnerabilities, implementing authentication/authorization, handling user input, or discussing web application security.

English

Deep integration with Playwright for browser automation and end-to-end…

English

Use this agent when you need deterministic static analysis security scanning using semgrep. This agent complements security-sentinel by running rule-based pattern matching to catch known vulnerability signatures, hardcoded secrets, insecure function calls, and CWE patterns that LLM-based review may miss. Requires the semgrep CLI to be installed.

English

Comprehensive RESTful API testing patterns covering HTTP methods, status codes, request/response validation, authentication, error handling, and contract testing.

Uncertain

Includes Accessibility Accessibility Enhanced, Authorization Testing, Contract Test Generator, and other workflows.

Install with
Claude CodeCodexCursorGitHub CopilotGemini CLI

Supported by the Atlas install prompt. Skill-specific requirements vary.

Pack stats

Skills14CategoryengineeringStars0

What’s included

Accessibility Accessibility Enhanced

Comprehensive WCAG compliance and accessibility testing covering ARIA, keyboard navigation, screen readers, color contrast, and automated a11y validation.

Authorization Testing

Validate authorization failures including IDOR, privilege escalation, and missing access controls. Test by attempting unauthorized access with lower-privileged credentials. Use when testing CWE-639 (IDOR), CWE-269 (Improper Privilege Management), CWE-862 (Missing Authorization), CWE-863 (Incorrect Authorization), CWE-284 (Improper Access Control), CWE-285 (Improper Authorization), or CWE-425 (Direct Request / Forced Browsing) findings.

Contract Test Generator

Generate contract tests for API migrations with consumer-driven contracts and provider verification

Cross Browser Testing

Test cross-browser compatibility on Chrome, Firefox, Safari, and Edge using Playwright. Use when ensuring browser compatibility or fixing browser-specific issues.

Cypress E2E Testing

Expert Cypress testing framework integration for browser-based end-to-end testing

Dark Mode Bug Finder

Detect dark mode rendering issues including contrast failures, missing theme tokens, image inversions, and transition glitches across components.

Docker Testing

Guidance for running and debugging tests in Docker environments for FastAPI + Vue/Tailwind projects.

GitHub Actions Testing

Expert guidance for testing and validating GitHub Actions workflows before deployment - catches cache errors, path issues, monorepo dependencies, and service container problems that local testing misses

Jutsu Bun:bun Testing

Use when writing tests with Bun's built-in test runner. Covers test organization, assertions, mocking, and snapshot testing using Bun's fast test infrastructure.

K6 Performance Testing

k6 load testing expertise for performance validation and analysis

Owasp Security

Use when reviewing code for security vulnerabilities, implementing authentication/authorization, handling user input, or discussing web application security. Covers OWASP

Playwright E2E Testing

Deep integration with Playwright for browser automation and end-to-end testing

Semgrep Sast

Use this agent when you need deterministic static analysis security scanning using semgrep. This agent complements security-sentinel by running rule-based pattern matching to catch known vulnerability signatures, hardcoded secrets, insecure function calls, and CWE patterns that LLM-based review may miss. Requires the semgrep CLI to be installed.

API Testing REST

Comprehensive RESTful API testing patterns covering HTTP methods, status codes, request/response validation, authentication, error handling, and contract testing.

Quick start

  1. Choose your skills. Select individual skills above, or choose the entire pack.
  2. Copy the install prompt. Use Copy install prompt above the list.
  3. Send it to your agent. Paste into your coding agent’s chat. Your agent reviews the source and guides the setup.

Try it with your agent

After installation, start with a request like:

Example request
Use the Accessibility Accessibility Enhanced skill to help with my task.
Ask me for the context you need before getting started.

Requirements & license

  • A coding agent that can access your project files and install skills.
  • Your agent checks each skill’s instructions, dependencies, and permissions during setup.
  • Reported license for the skills shown: MIT. The author’s terms apply.
Testing & Security Skills | Agent Skills Atlas