Download

Skill UI

Browse and discover 19269+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Static Testing , found 27 results

Default Newest Most Downloaded

Terraform IaC Architecture and Best Practices

terraform-skill

agentscope-ai/QwenPaw

A comprehensive guide for designing and implementing robust Infrastructure as Code (IaC) using Terraform or OpenTofu. Covers module hierarchy design, best practices for naming conventions, structuring multi-environment pipelines, advanced testing strategies (native tests, Terratest, static analysis), and integrating security scanning (trivy, checkov) into CI/CD workflows.

Smart Contract Security Audit for Foundry Projects

auditing-foundry-smart-contract-security

mukul975/Anthropic-Cybersecurity-Skills

A comprehensive, pre-deployment, defense-in-depth security audit tool for Solidity smart contracts built with Foundry. It combines static analysis (Slither, Aderyn), symbolic execution (Mythril), property-based fuzz testing, and key hygiene checks to proactively detect critical vulnerabilities like reentrancy, access control flaws, and arithmetic bugs before deployment to any EVM chain.

Laravel Deployment Verification Pipeline

laravel-verification

A comprehensive pipeline designed for Laravel projects to ensure code quality and stability before deployment. It systematically executes environment checks, linting, static analysis, full testing with coverage, security audits, migration validation, and cache preparation. Essential for robust CI/CD pipelines and pre-Pull Request validation.

Quarkus Development Verification Pipeline

quarkus-verification

A comprehensive CI/CD quality gate for Quarkus microservices. This pipeline guides developers through critical stages: build integrity, static code analysis (Checkstyle, SonarQube), thorough unit/integration/API testing with coverage enforcement, dependency vulnerability scanning, native compilation validation (GraalVM), and performance load testing using K6. It ensures high code quality before PR or deployment.

Theory Development for IS Management

jmis-theory-development

brycewang-stanford/Awesome-Journal-Skills

This comprehensive guide helps researchers move beyond descriptive correlations to build rigorous, theory-driven manuscripts for top-tier IS journals. It outlines how to structure theoretical arguments based on specific research styles, including IT business value mechanisms, platform economics, behavioral models, and economic incentives, emphasizing the derivation of hypotheses and comparative statics before empirical testing.

Source Code Security Audit Workflow

zhaoxuya520/reverse-skill

A comprehensive white-box security auditing workflow designed for proprietary source code. It integrates static analysis security testing (SAST) tools like Semgrep and CodeQL to detect common vulnerabilities (e.g., injection, IDOR, crypto misuse), followed by mandatory manual threat modeling and verification steps. Applicable for PR reviews and pre-deployment security checks.

Mobile App Reverse Engineering Guide

zhaoxuya520/reverse-skill

A comprehensive methodology for deep security testing of both Android (APK) and iOS (IPA) applications. This guide covers the entire workflow, from initial information gathering and static analysis (decompilation, code structure analysis) to advanced dynamic instrumentation, network interception, and bypassing modern security measures like SSL Pinning, Root/Jailbreak detection, and anti-debugging.

Firmware Penetration Testing

firmware-pentest

zhaoxuya520/reverse-skill

A comprehensive firmware and IoT penetration testing skill following OWASP FSTM. Covers firmware acquisition, static analysis, file system extraction with binwalk/unblob, automated EMBA scanning, system emulation via Firmadyne/QEMU, dynamic debugging, and binary exploitation for ARM/MIPS devices. Ideal for auditing routers, cameras, smart home devices, reproducing IoT CVEs, and discovering embedded 0-days.

Comprehensive Code Review Workflow

comprehensive-review-full-review

sickn33/agentic-awesome-skills

This skill orchestrates a comprehensive multi-dimensional code review using specialized agents. It covers code quality, architecture, security, performance, testing, and documentation. Users can configure focus areas like security, performance, or TDD compliance. It integrates static analysis, security scanning, and automated metrics to provide actionable feedback and remediation guidance for software development projects.

iOS Security Red Team Pipeline

ios-redteam-pipeline

sickn33/agentic-awesome-skills

End-to-end iOS security assessment pipeline covering app inventory, IPA acquisition, static analysis, and secret extraction. Requires explicit authorization for offensive testing and bug bounty scopes.

AI-Powered Code Review Specialist

performance-testing-review-ai-review

sickn33/agentic-awesome-skills

Expert AI-powered code review combining automated static analysis, intelligent pattern recognition, and modern DevOps practices. Leverages tools like GitHub Copilot, SonarQube, CodeQL, and Semgrep to identify bugs, vulnerabilities, and performance issues across 30+ languages, integrated with CI/CD pipelines for instant PR feedback.

Ruby Rails Development Specialist

sickn33/agentic-awesome-skills

This skill enables writing idiomatic Ruby code using metaprogramming and Rails patterns. It covers gem development, performance optimization, and testing frameworks like RSpec. Ideal for building maintainable applications and ensuring code quality through static analysis tools.

Language