#Testing
200
2026-09-11
Show HN: Open-source simulation testing infra for voice agents
A
Hey HN, we’re Nischal & Naman. We’re brothers, and together we’re building an open-source platform for simulation based testing of voice agents (try it out in 5 mins - https://docs.egma.ai/docs/get-started/quickstart, 2 min demo video - https://youtu.be/wgDWEe5UAUY) Platforms that help you do simulation testing already exist. But they all charge a heavy premium on top of inference costs. We believe if the industry truly wants to scale simulation testing of voice agents, we need to stop charging a premium on inference and start providing infrastructure to scale simulations. The project is built in a way that allows you to bring your own STT, LLM, and TTS provider keys while also providing a way for us to provide inference directly within the platform at a 0% markup so you don’t have to wrestle with multiple keys/ rate limits. A bit on why’re we’re building this - We started working on voice agents in early 2024 and since then, have worked on numerous voice ai systems - like screenless voice-powered hardware for kids[1], AI receptionist deployed in healthcare practices like med spas & therapy clinics and personal accountability coaches. Some of these were full-fledged startups others were just side projects. But we kept on encountering similar issues all throughout. One of the most frustrating parts was calling the agent again and again, reciting the same script to test its behavior. We also kept on encountering new issues all the time in production that we couldn't have simulated pre launch. This frustration led us to a bigger question: how can developers trust the voice agents they’re shipping? We believe building that trust takes two things - - First, you need a way to test the major scenarios your agent will face in production before you release it, without having to make every call yourself. But you can’t test for everything. Real world is too messy to predict in advance. - Which brings us to the second: you need a way to find issues once your agent is in production, whether it’s handling a few dozen conversations or millions. Detect drift in known behaviors AND surface unknown-unknown ways in which your agent is going wrong. We think it’s a really hard problem to solve. And having felt it firsthand, we’re deeply motivated to take a shot at it. Today we’re launching the simulation testing side of the platform. We feel it’s mature enough that real teams can depend on it. For eval design, we took inspiration from anthropic’s evals design[2] and extended it to voice systems. For technical & business model design we borrowed ideas from Langfuse[3]. Our stack is postgres, clickhouse & minio. Its easy to self-host[4] & the code has a permissive MIT license. We also have managed cloud version. We’ve written more about our [testing]( https://docs.egma.ai/docs/core-philosophies/testing-philosop...) and [monitoring]( https://docs.egma.ai/docs/core-philosophies/monitoring-philo...) philosophy in the docs. We’d love feedback from the HN community and people building voice agents - how are you testing today, what’s working and what’s frustrating? We’ll be in the comments. Thanks! [1] https://x.com/theBhulawat/status/1966200231705595932?s=20 [2] https://www.anthropic.com/engineering/demystifying-evals-for... [3] https://github.com/langfuse/langfuse [4] https://docs.egma.ai/self-hosting/get-started
2026-11-08
shanselman/sandbox-mcp
S
Fresh, throwaway Windows machines for testing your apps: an MCP server and CLI that automate Windows Sandbox
2026-10-19
Show HN: Sphinx – A hook that quizzes you on your AI's code before shipping
A
FOSS, Basically it plugs into your existing coding agent workflow and every time you push to prod it'll throw up a questionnaire that checks if you understand how the code you're pushing works.
2026-09-12
Hona/openeval
A
Typed prompt-and-judge SDK, CLI, and evidence viewer for agent evaluations
2026-09-25
Show HN: Canary (YC) – Independent verification for AI code
A
Hey HN, we are Aakash and Viswesh and we are building Canary ( https://www.runcanary.ai/) - independent verification for AI code. Claude/Codex calls Canary with the changesets, intended behaviour and team knowledge. Canary then deploys agent swarms to investigate potential failures and test suspected runtime bugs in remote sandboxes. To try it on your repository, paste this into your coding agent: Install the Canary CLI with npm i -g @runcanary/cli, then run canary skills and follow its instructions to onboard this repository. Verification starts with what software is supposed to do and most importantly what it must never allow. This means investigating how inputs, permissions, state, timing, dependencies etc interact with each other. Intent is not always fully declared as well but many expectations are clear: private files should stay private, credentials should not leak, and retries should not create unintended duplicate effects. We believe the future is a unified and independent verification system that starts with all those expectations and then chooses how to investigate each suspected failure. Source-only code reviews catches static issues in the implementation but even a clean review leaves a good chunk of behavioral only issues untested. Unit tests, integrations, E2E, static analysis, runtime experiments and formal verification are all means to establish that behavior thereby generating different kinds of evidence and guarantees. This is why we believe a dedicated verification harness that can think and reason through all these modalities and invariants is necessary on top of general intelligence. The harness needs to start with the system’s intended behavior, develop a series of potential failure scenarios and choose how to investigate them. It’s sole functionality is to pressure test and challenge the assumptions behind a change, create the conditions needed to test suspected failures and assess what the resulting evidence establishes How Canary works: it takes a cold snapshot of the codebase when called, combining the supplied intent and team knowledge with requirements, decisions, prior issues from tools like Notion, Linear. It can also route questions to you through the coding agents if anything is ambiguous. Canary’s harness coordinates agent swarms by leveraging the different strengths across model families. It compares the code before and after, traces the effects through callers, dependencies, state transitions etc. and each suspected failure becomes a concrete scenario with an actor, state, trigger, outcomes and many more runtime states., For each suspected failure, Canary chooses the best way to provide evidence through methods like runtime verification, static analysis, unit, integration or sometimes even combination of these as necessary. The agent executes these checks in remote sandboxes by seeding data, configuring permissions, mocking dependencies and third party integrations and much more. Canary then returns these findings and supporting evidence back to the coding agents which then fixes these failures and requests reverifications against the failed scenarios. To get started, give your coding agent this setup instruction and tell us what it caught and how we can do better. Install the Canary CLI with npm i -g @runcanary/cli, then run canary skills and follow its instructions to onboard this repository. We are still pretty early in our journey and would love feedback on the product and how we can do better.
2026-09-18
Show HN: MCPJam - the first testing & evaluations platform for MCP servers
A
Prathmesh, CEO of MCPJam here. Users now start in ChatGPT, Claude, Cursor, and other AI clients. They reach your product through your MCP server. That means your users often aren’t in your product anymore. You can’t see what they prompted for, how the agent interpreted it, or whether your server helped them get the result they wanted. I saw this firsthand leading MCP technical strategy at Asana, including our ChatGPT and Claude launches. We were building high-stakes enterprise integrations, but we had no reliable way to test them the way we test normal software- or to know whether they worked once they reached real users. I started using MCPJam for those problems after re-connecting with my former coworker who created the project. brought it to more of our developers, and worked it into our CI/CD pipeline. I joined the team because I kept hearing the same issue from other companies building for agents. So, what does “good” look like for MCP? For us, it means users reliably get the outcome they came for, across the AI clients they use. That’s what we’ve been building toward. MCPJam now helps you test the full workflow, from the first prompt to the expected result: * Swarms: Simulate users with different goals and prompts to find where workflows break across AI clients. * User Testing: Watch how real users interact with your MCP product, where they get stuck, and how they feel about the results. * Evals: Turn those workflows into repeatable tests that check whether users get the expected outcome. * CI/CD: Run those evals across AI clients before each release to catch regressions. Over 106,000 developers and +300 enterprises use our open-source solution to see how their servers behave locally across major AI clients. MCPJam has grown from a debugging tool into a continuous testing and evaluation workflow for MCP servers. If you’re building an MCP server or agent-facing product, give MCPJam a try. What is the hardest thing for you to test? We love hearing about your MCP server builds!
2026-11-04
Balanov/skein
A
Fail-closed swarm orchestration with epoch-fenced work and late-completion rejection.
2026-08-28
christophhdesign/open-design-system-bench
A
How AI-ready is your design system? A plug-in benchmark that runs coding agents against your component library and grades the output. Built against a production design system and generalized for any React + TypeScript component library.
2026-10-17
gpu-verifier/sentryward
A
Automatic formal verification for warp-specialized GPU kernels.
2026-08-24
Reality-JH/frontend-promotion-guard
B
Release gate for CSS integrity, computed styles, visual regression, and safe Docker promotion.
2026-11-03
Balanov/verdict
A
A 197 KB local semantic verifier for AI agent tool calls. Exit code 0 is not proof.
2026-10-15
NethermindEth/LeanCIL
A
LeanCIL is a Lean 4 formal verification framework for .NET programs. It enables machine-checked proofs of correctness and safety against compiled Common Intermediate Language (CIL), supporting applications written in C#, F#, and other .NET languages.
2026-09-12
filip131311/crossmatch
A
Find where your iOS and Android apps disagree, and get a side-by-side video of every difference.
2026-09-04
agentthink/sim-foundry
A
A single computer can virtualize an entire industrial site's devices, with no need to purchase physical hardware such as PLCs, cameras, or sensors; aimed at developers and testers of industrial control, gateways, host computers, and IoT platforms, solving the industry pain point of "development and debugging being blocked by hardware delivery cycles."
2026-11-09
brunnojob/cifuse
A
Turn noisy CI logs into grouped failures, exact evidence and investigation steps. Offline CLI, reusable GitHub Action and bilingual browser workbench. No API keys.
2026-10-22
mikensec/php2shell-lab
A
Offline, reproducible lab to safely analyse an untrusted PoC for CVE-2026-109618/109619 and build detection rules. No exploit included; bring your own sample.
2026-10-07
bottomless/agent-duel
A
Blinded battles between coding agents: two agents, one prompt, you pick the winner. Desktop app, runs locally.
2026-09-28
SecFathy/xss-specialist
B
KEV-gated continual-learning XSS specialist with execution-authoritative browser verification
2026-09-06
Mujung/bitcoinfuzz
A
Differential Fuzzing of Bitcoin protocol implementations and libraries
2026-08-25
stemmatics/paneldx
A
Validate longitudinal datasets before you model them: entity-key integrity, target leakage, cumulative-feature traps, and the naive baseline you forgot to run.
2026-10-06
Show HN: Era – Complete Simulated Companies for Your Agents
B
Hi, I'm Benji. I'm one of the people who built Era a free-for-builders service that creates digital twins for common SaaS services. We built it for ourselves and got a lot of excitement from research partners - and are giving it away for free.
2026-09-04
cyptnpassira/PromptLedger
A
PromptLedger - version prompt templates, run deterministic comparison snapshots, score candidate responses, and ship diffable experiment reports. Python core plus a Go companion CLI.
2026-11-09
faissalrez/svelte-check-reporter
A
Show svelte-check's Svelte and TypeScript errors in GitHub pull requests and GitLab merge requests: Code Quality reports, Actions annotations and SARIF for code scanning.
2026-10-07
nsodhi-cmu/MinigamesBenchmark
A
A benchmark of seventy minigames for computer use agents, testing a variety of skills. Think your agent can beat them all?
2026-09-29
B0yko/booking-truth
A
Tests any AI appointment-setting agent on the calendar's end state, not its transcript: fault injection, pass^k, false-success rate. Ships a guarded Cal.com / Google Calendar / HubSpot booking agent.
2026-09-03
dreamers-laboratory/ai-evaluation-framework
B
Accuracy, latency p95, and cost benchmarking for model-based solutions, with per-field ground-truth scoring.
2026-11-05
Balanov/equal
A
Turn real API traffic into a local sandbox and OpenAPI. Tiny static Go binary, any HTTP SDK, offline development, MIT.
2026-10-24
theorem-labs/oss-verify
A
OSS Verify: enrollment and build instructions for formally verifying open-source fuzz targets
2026-09-18
planetscale/lead
B
A non-production Postgres text-search extension for exercising TIN-compatible application SQL in development, test, CI, and staging environments
2026-09-02
H0nGzA1/testpilot
A
Agentic E2E testing platform — natural-language test cases executed by a browser agent in real Chrome, judged by an LLM with video/screenshot evidence
2026-10-08
colinhacks/motherload
B
Import TOML, YAML, JSON5, JSONC, CSV, TSV, Markdown, text and .env files as typed modules, and JSON Schema as a type and a validator. TypeScript 7.1 content mappers.
2026-09-23
aimardcr/ReCam
B
Android virtual camera for security testing. Injects frames into cameraserver so any app sees a video file, desktop stream, or webcam instead of the real camera.
2026-09-23
mizchi/jev-test-filter
B
Score every test against a git diff with Jev, and emit the filter arguments vitest, node:test, Playwright, cargo test and go test already understand
2026-09-06
1etu/actual-fingerprints
B
Deterministic synthetic fingerprints from a seed. Zero dependencies, Node.
2026-08-25
HotStartLabs/glassbox
B
Client-side browser-fingerprint bench — see what any website can measure about your browser, and how identifiable you are. Live: https://glassbox.codecanary.org
2026-10-17
Show HN: Esp32sim – Run ESP32 firmware in the browser
B
Hi HN, I’ve been working on esp32sim, an open-source ESP32 emulator that runs in the browser. The fun part of the demo is that there is no ESP32 involved — the firmware is executing in the emulator. The goal is to make ESP32 software easier to experiment with, test and simulate without always needing physical hardware connected. Source: https://github.com/mikroverk/esp32sim I made a short video showing it in action: https://youtu.be/waoWFilTWEc I’m particularly interested in feedback from embedded developers: what would an emulator like this need to support before you’d actually use it for development, testing or CI?
2026-10-03
chen-006/meow-ai-arena
B
Open-sourcing the top three entries of an AI algorithm competition: territory capture, Bomberman, and capture the flag. Problems, judges, each model's original code, per-round results, replays, and one-click challenge scripts
2026-08-23
cth9191/site-clone
B
Point Claude Code at a URL, get a teardown + a verified near pixel-identical rebuild. Runtime probes, evidence-tagged TEARDOWN.md, Playwright pixel-diff QA.
2026-10-27
cortad/cortad
B
Find out which of your own rules your AI app breaks, before a customer does. Writes people from your rules, plays them against your app, quotes the reply that broke it.
2026-10-08
EvilFreelancer/tgfake
B
Offline Telegram Bot API for testing bots, Mini Apps and LLM integrations.
2026-09-30
Ice-Hazymoon/jevwright
B
Browser tests for business flows, written as the steps a user takes. AI finds the controls once, recordings replay for free, and your code decides the verdict.
2026-10-06
b3s3da/qemu-harness
B
QEMU harness for AI agents: boot aarch64/arm/riscv64/x86_64 kernels in seconds, exec via guest agent, fast rootfs rebuilds, IoT emulation
2026-10-05
Bluboks/scan-sim
B
Office laser-print + MFP-scan simulator for OCR test data (physical chain, no generative models)
2026-09-24
openqa-cn/jev-browser
B
Jev Browser — indexed browser automation. Jev chooses the control, Playwright acts. A CodexQA skill.
2026-09-13
grah4na/prism
B
Differential fuzzer that finds HTTP parser discrepancies across 54 servers to uncover request-smuggling primitives.
2026-10-04
RicoKomenda/agentic-chaos
B
Security chaos engineering for AI agents and LLM applications
2026-10-04
tools4imps/exhale-ruby
B
The contraction gate for Rails: no PR merges while the codebase holds duplication the Contract doesn't keep
2026-09-22
iterat0r/CnaEmulator
B
CnaEmulator is a standalone, general-purpose development, emulation, and testing harness for Cobalt Strike Aggressor Scripts (.cna)
2026-09-16
AlchemyInCode/plumloom-autoeval-oss
B
Open-source CLI and MCP server for evaluating AI applications and gating releases with reliability evidence.
2026-09-06
PillCrew/deedchain
B
Benchmark of report fidelity for browser agents: does the agent's final report tell the truth about what it actually did?
2026-09-22
buddy/minesweeper
B
A Minesweeper benchmark for LLM agents. One identical board, up to nine models in parallel, one clock, one tool layer.
2026-09-25
Ice-Hazymoon/jevlint
B
Semantic lint rules for the code-review questions a deterministic linter can't express
2026-09-12
StatXzy7/worktree-import-guard
B
Verify that your tests actually executed the source tree you think they did.
2026-10-24
theorem-labs/oss-verify-proofs
C
Theorem statements about OSS-Fuzz fuzz targets as compiled RISC-V binaries, and machine-checked Rocq proofs of them
2026-10-22
hassan-algo/open-sesame
B
🔓 An AI web-pentest skill for Claude Code. Point it at a site you're authorized to test — it maps the attack surface, works through the OWASP WSTG, validates findings, and writes dev + stakeholder reports (PDF).
2026-10-22
isabekastsuc/CinderVM
B
Deterministic bytecode VM for agent execution - verified images, snapshots and a hash-chained replay journal
2026-09-16
janice20435/cf-turnstile-token
C
Command-line Cloudflare Turnstile token generator: discover the sitekey on any page and print a cf-turnstile-response token for your scripts, tests and CI.
2026-10-29
turayevr12-spec/defiguard
B
Heuristic Solidity/DeFi security review toolkit — flags suspicious patterns to review, backed by Foundry scenarios. Educational / authorized use only.
2026-09-16
zj-unicom-ai/uni-llm-bench
B
A self-hosted lightweight LLM API benchmarking platform — model fingerprint comparison + model quality evaluation.
2026-09-06
nexovir/Forbidra
B
A bug bounty tool for bypassing 401/403 access restrictions and testing endpoint accessibility.
2026-09-02
needsbuilder/bside
B
Benchmarks for Aside — do AI browsers actually beat existing automation on the real web? Five Korean-web errands, three setups, everything published.
2026-08-28
open-daimax/daimax-appbench
B
An automated benchmark platform for AI-generated apps — built-in evaluation rules, standard sample sets, and layered test cases across a multi-dimensional metric system. One pipeline runs build, install, E2E tests, and scoring into a shareable report.
2026-09-20
mdpsec/should-i-submit
B
A local, safety-first pre-submission reviewer for bug bounty reports.
2026-09-17
DevCop95/dev101x-pentest-lab
B
Self-contained Docker Pro Lab for pentest practice: boolean blind SQLi + hashcat cracking, web path traversal, command injection, internal network pivoting and SUID PATH-hijack privesc — with live flag validation and completion certificate. No VPN needed.
2026-09-15
00200200/repro-lens
B
Static reproducibility checks, experiment replay and before/after evidence for ML code and coding agents — no ML dependencies for scans.
2026-08-25
dughogan/comfy_workflow_audit
B
A tool to evaluate whether a ComfyUI workflow can be used in production.
2026-09-04
zakirkun/shiro-neko
B
An agentic coding CLI. It reads your code, edits it, runs your tests, and asks when the request is ambiguous — in a terminal UI, with every mutating action gated behind an approval prompt.
2026-10-22
jaydenfyi/json-const-content-mapper
B
A TypeScript content mapper that types JSON imports as const
2026-09-19
sene4kin/sfmc
B
A static analyzer for JAR files. Analyzes whether the code contains anything that could cause harm
2026-08-26
jsdhwfmax/EvalForge
B
Open-source quality and security evaluation platform for RAG applications and AI assistants.
2026-10-16
skibid991/httpresponder.com
B
Free HTTP request and response testing API. Decode base64 from a URL, echo requests, return custom status codes and headers, test redirects and streams.
2026-09-27
Mister-iks/pcybox-attackgraph
B
Open source browser lab to build a simulated infrastructure, watch an attack move through it, and check whether your defense works.
2026-09-26
agentscope-ai-java/sqlite-fts5-check
C
Detect drift between a SQLite FTS5 index and its content table, which integrity-check does not catch.
2026-09-17
thx853068675-dev/quietstart
B
A HarmonyOS native page control recognition assistant tool. Recognize and learn pages following prompts, and automatically generate rules.
2026-09-25
TanStack/container
B
A browser-powered sandbox for JavaScript and TypeScript development.
2026-10-02
kingofspace0wzz/cua-swe
C
CUA-SWE: When Computer-Use Agents Meet Visual Software Engineering. 105 tasks across Web, Game, Mobile, and DevOps.
2026-09-30
afk-yar/1c-testpilot-agent-kit
C
A skill, tester agent, and benchmark for AI agents that test 1C via ROCTUP/1c-testpilot
2026-10-29
dantaspaulo/check-pre-lancamento
C
Skill para Claude, Codex, Cursor e outros agentes: check pré-lançamento do seu app com 20 checagens de segurança + 10 de prontidão (Lovable, Bolt, Replit, React, Next, Laravel, Django, Spring, Go…). Por Paulo Sérgio Dantas.
2026-10-25
mokevnin/dev-guardrails
C
An opinionated, curated list of tools for enforcing software development standards: one recommended tool per job, with limits.
2026-10-09
naplesblue/riskbound
C
Position-sizing rules with explicit evidence boundaries (volatility targeting + 200-day SMA), forward log, and an honest-testing harness.
2026-09-15
MrPunyapal/laravel-extended-validation
C
Validation rules for Laravel applications, available as rule classes, fluent Rule macros, and string rules.
2026-08-28
shamashel/testing-on-the-toilet
C
Agent skill: Google Testing on the Toilet practices for writing and reviewing tests
2026-08-24
Wu030616/Triad
C
A setup that lets multiple AI agents collaborate on engineering work, where no party can sign off its own design as passing, plus its implementation and the ledger left behind when it actually ran.
2026-10-23
devploit/php2shell
C
PHP2Shell: version-aware research toolkit for CVE-2026-109618 / CVE-2026-109619 — pre-auth RCE in PHP session.upload_progress (mod_php). Build profiles, labs, heap calibration and detection guidance for authorized security testing.
2026-10-14
SerfDiscriminate/Seo-Guard
C
Automated technical SEO auditing tool to detect website issues and prevent SEO regressions.
2026-10-05
IncomeStreamSurfer/prove-it-better
C
Claude Code skill: make anything better and prove it before it ships — blind two-order judging, hard checks, reversible rollout. From the method behind harborseo.ai.
2026-09-30
hunkim/ai-is-fast-your-tests-are-slow
C
AI is fast. Your tests are slow. Research, a tutorial, and an agent skill for making test suites fast — in the AI coding era the bottleneck is testing.
2026-08-27
antifailure/antifailure
C
Disposable copies of your production stack for every pull request: masked Postgres branches, sandboxed third-party APIs, AI agents that run real user flows, and load replay.
2026-09-14
ROCTUP/1c-testpilot
C
MCP server for working directly with the testing client without a test manager
2026-09-02
toyo12312/nestjs-clean-architecture-boilerplate
C
Production-ready NestJS authentication boilerplate built with strict Clean Architecture, Domain-Driven Design (DDD), and full unit test coverage.
2026-09-20
ThisTakou/UserAgent-list
C
Automated User-Agent database for 100+ browsers on 100+ operating systems. Updated every 5 minutes via GitHub Actions. Weighted by real-world popularity, grouped by OS and browser, with a cumulative ALL/ folder of unique agents.
2026-08-24
aiopshwang/verify-regression-tests
C
Open Agent Skill for Claude Code and Codex that verifies whether a regression test fails for the intended bug and passes with the candidate fix—catching false greens caused by mocks, gates, fallbacks, and fixtures.
2026-10-03
1942853632/schema-diff-lens
C
Local browser extension for explainable JSON schema compatibility checks
2026-10-29
Sidiora-Labs/workbox
C
A sandbox for native AI agent interactions and programmatic tool use. Wildly capable inside. Completely contained outside.
2026-10-19
Aoisop/mawoagent
C
An auditable, reversible, evaluable local agent runtime that turns feedback into skills — and ships them only when evidence and tests say so.
2026-10-03
1942853632/openapi-lens
C
Local Chrome extension for explainable OpenAPI contract quality analysis
2026-09-30
LindseyZ1205/video-processing-pipeline
C
Spring Boot service that transcribes uploads asynchronously: S3 presigned upload → S3 event → SQS → idempotent worker with DynamoDB leases, retries and a DLQ. Tested against LocalStack with Testcontainers.
2026-09-29
Jeng-linLi/student-absence-system
C
SAAS v0.2.0 — Student Absence & Academic Accommodation System: Flask+SQLite prototype (two-level approval, CSRF, attachment access control, 49-check CI), enterprise design package for HKUST(GZ), and Individual Ideation assignment
2026-10-03
1942853632/pr-risk-lens
C
Local Chrome extension for explainable pull request change-risk analysis
2026-10-01
wenslink-os/outage-lab
C
See which app features survive when internet, DNS, login, payment and other outside services fail. Free, offline-first teaching simulator.
2026-09-28
yldray/vibe-check
C
Ship AI-written code without shipping AI-written bugs. Pre-launch test cases, chronic bugs and store-release rules for vibe coders.
2026-09-22
openlayer-ai/jevals
C
Agent evals and guardrails in one request. Built on Jev, Kev and Laya.
2026-09-19
dannote/jev
C
TypeSafe Jev for OTP: reply to Jev from a GenServer and pattern match on its answer
2026-10-25
CRFXN5C/mcd-mcp-kit
C
MCP integration health check and measured pitfalls for McDonald's China MCP Server
2026-09-26
angusdevgo/Seep-Tool
C
CWE-602 client-side authentication weakness white-box audit methodology and defense-in-depth hardening research framework
2026-09-19
hiteshchoudhary/dockerlabs
C
A lab to learn and master docker. Feel free to use to teach as well
2026-08-31
KrisTHL181/Break-This-Repo
C
This repository automatically merges pull requests without conflicts. All text is subject to edits via PR and shouldn't be trusted.
2026-10-15
OSVerify/OSVerify
C
One-sided verification under limited expert review: audited review of solutions and papers (mathematics for now).
2026-10-06
kkjiangk/raft-kv-store
C
C++20 Raft key-value store with atomic persistence, framed protobuf RPC, retry-safe operations, and reproducible fault tests.
2026-09-24
anthonyli/laya-pilot
C
Generate replayable Excel test cases from live browser pages, or run existing Excel cases, using Playwright and local Laya or a compatible decision API.
2026-09-18
darksecc/mccccodereviewer
C
MCC Code Reviewer — evidence-first repository intelligence with score-v2, regression radar, blast radius, codebase GPS, task lens, contract/test/architecture change analysis and safe What-If review simulation.
2026-08-31
uiamirali/Actionory
D
Open source frontend for Actionory — a modern API workspace for building, testing and organizing APIs.
2026-10-07
sd-ivan/fastify-pickup-order
D
Fixed-menu lunch pickup ordering app built with Fastify, demonstrating request schemas and status transitions with an email notification on ready.
2026-10-03
siddharth-ss/python-basics-lab
D
Interactive Python learning lab covering core Python concepts through CLI lessons, a Tkinter GUI, runnable examples, and automated tests.
2026-09-21
fstandhartinger/jevbench
D
JevBench v1 - a benchmark for Jev-class typed decision models: smart, cheap, fast, reliable, open.
2026-10-11
tlzmw001/naiyue-test-agent
D
A Python and LangChain agent engineering project for programming and software testing.
2026-08-24
alphaparkinc/genpark-agentic-qe-full-stack-test-plan-executor-skill
D
Agentic QE platform automating full-stack test plan creation, execution and release gate decisions (TestMu AI style)
2026-09-15
HangYu8123/mini-harness
D
A local minimized harness, with simplified output and logs for self-evolve
2026-09-05
alphaparkinc/genpark-edge-case-unit-test-coverage-synthesizer-skill
D
Edge-case unit test suite synthesizer & branch coverage optimizer (CodiumAI)
2026-10-07
StarSky1145/asaka-inject-testing
D
Testing and troubleshooting skill for Asaka/Nilore (Minecraft 1.20.1 injector): full-chain testing with a fake JVM, failure signature reference, crash localization, build consistency verification
2026-10-29
itsme-ganzu/belajar-ngoding-byGanzu
D
Belajar coding Python dari nol tanpa bingung arah, dipandu Tutor AI pribadi yang melatih logika dan diverifikasi tes otomatis.
2026-10-02
wenslink-os/break-your-assumptions
D
Interactive experiments in the assumptions that break software. Predict, break, repair, and keep the test.
2026-10-02
wenslink-os/build-the-world
D
Build the technologies that built the world. Free, local-first engineering labs with executable tests and build, break, repair workflows.
2026-10-02
wenslink-os/software-without-the-world
D
Cut the internet, break login, or time out a payment. A free local simulator for offline fallbacks, data ownership, and safe recovery.
2026-10-22
Ostorlab/interview-project-examples
D
Retired example projects from Ostorlab's interview process, kept for reference.
2026-11-07
kIieret/SWE-agent-SWE-agent
D
SWE-agent takes a GitHub issue and tries to automatically fix it, using your LM of choice. It can also be employed for offensive cybersecurity or competitive coding challenges. [NeurIPS 2024]
2026-11-05
Magmazumsignify/qa-delivery-check-12d035
D
Temporary acceptance-test repository for delivery checks
2026-11-09
skavuri143/witnessforge
unrated
Generate the smallest test dataset that provably catches broken data-mapping rules in ETL pipelines.