Review & QA — AI Agents, Skills & Tools
Agents, skills, guides, tools, and commands for review & qa — 25 curated resources for building with AI coding agents.
Refactoring Specialist
Use this agent to safely restructure code without changing behavior — extracting, renaming, decoupling. Examples — breaking up a god object, removing duplication, improving testability.
Accessibility Auditor
Use this agent to audit web UI against WCAG 2.2 AA — semantics, keyboard, ARIA, contrast, forms, and motion. Examples — auditing a new component for keyboard traps, checking a form for accessible errors, running a pre-ship a11y pass on a page.
Code Reviewer
Use this agent to review code changes for correctness, security, and maintainability before merging. Examples — reviewing a PR diff, auditing a new module, checking a refactor for regressions.
Debugger
Use this agent to diagnose failing tests, runtime errors, or unexpected behavior by forming and testing hypotheses. Examples — a stack trace to root-cause, a flaky test, a "works locally but not in CI" bug.
Performance Engineer
Use this agent to profile and optimize performance — latency, throughput, memory, bundle size. Examples — a slow endpoint, an N+1 query, a heavy render, a large JS bundle.
Security Auditor
Use this agent to find security vulnerabilities — injection, auth flaws, secrets, unsafe deserialization, dependency risks. Examples — auditing an API surface, reviewing auth code, pre-release security pass.
Test Engineer
Use this agent to write and improve automated tests — unit, integration, and edge cases. Examples — adding coverage to an untested module, writing regression tests for a bug, designing a test plan.
PR Description
Draft a clear pull request description from the branch diff against its base. Use when you have a finished branch and want a reviewer-ready PR body before opening the PR.
Bundle Analyzer
Analyze a JS/TS production bundle and surface the biggest size wins — heavy dependencies, duplicate packages, missing code-splitting, oversized polyfills, and dev/server code leaking into the client. Use when a bundle is too large and you need a ranked, actionable reduction plan.
Dead Code Finder
Find genuinely unused code — unreferenced exports, unreachable files, and unused dependencies — and remove it safely with build/test verification. Use when trimming a codebase or untangling years of accreted cruft.
Secret Scanner
Scan a repo or a diff for committed secrets — API keys, tokens, private keys, .env files, and high-entropy strings — then triage real leaks from fixtures. Use before pushing, in review, or when a credential may have leaked.
Coverage Gap Finder
Run the project's coverage tool and identify the highest-value untested paths — error branches, edge cases, and critical modules — then propose specific test cases for each gap. Use when you have a coverage report but don't know where new tests will pay off most.
Mock Data Factory
Generate a typed mock/fixture factory for a given type, interface, or schema, inferring believable values from field names and types. Use when tests or local dev need realistic, type-safe sample data with per-field overrides.
Test Scaffolder
Scaffold a test file with sensible cases for a given module or function. Use when adding tests to untested code and you want a fast, structured starting point.
Coderabbit
An AI code reviewer that posts line-by-line feedback and summaries on every pull request.
Playwright MCP
Microsoft's open-source MCP server that gives AI agents structured browser automation via Playwright's accessibility tree.
Explain Error
Diagnose an error message or stack trace and propose a fix.
Create PR
Push the current branch and open a GitHub pull request with a generated title and body.
Extract Function
Extract a code region into a well-named function and update the call site.
Refactor
Refactor the target for readability and structure without changing behavior.
Find Bug
Investigate a reported symptom, form hypotheses, and locate the root cause.
Review PR
Review a pull request for correctness, security, and style, and summarize findings.
Security Scan
Scan the current diff or given paths for security vulnerabilities.
Fix Failing Test
Diagnose and fix a failing test by finding the real root cause.
Write Tests
Generate tests covering the happy path and edge cases for the given target.