Krish-1507

OpenPitStop — Testing skill for Claude Code

Testing community

A referee your AI coding agent can't cheat.

How to install OpenPitStop

This entry records only its repository, not the path inside it, so there is no exact command to give. Open Krish-1507/OpenPitStop and copy the folder into ~/.claude/skills/, or the file into ~/.claude/agents/.

What OpenPitStop does

A referee your AI coding agent can't cheat. PitStop scans your repo, seals the evidence, catches agents faking test passes, pen-tests your app, and loops fix → verify → re-scan until it's genuinely clean. No telemetry, free, MIT-licensed and everything stays on your machine. Works in Claude Code, Cursor, Codex, OpenCode, and Kilo Code.

Alternatives in Testing

Pua — Use when the user invokes /pua or asks for PUA mode, try-harder/retry help, change-approach coaching, completi 19.5k ★
Test TDD — Run when user calls /test-tdd 957 ★
Adversarial Spec — A Claude Code plugin that iteratively refines product specifications by debating between multiple LLMs until a 514 ★

README

OpenPitStop CLI

**The agent finally has a referee it can't cheat.** OpenPitStop is a CLI that scans your repo, scores it, and checks everything your AI coding agent does — so when it says "done", you know it's actually done.

[![npm version](https://img.shields.io/npm/v/openpitstop)](https://www.npmjs.com/package/openpitstop) [![CI](https://github.com/Krish-1507/OpenPitStop/actions/workflows/ci.yml/badge.svg)](https://github.com/Krish-1507/OpenPitStop/actions/workflows/ci.yml) [![License: MIT](https://img.shields.io/badge/license-MIT-blue.svg)](LICENSE)

AI coding agents are brilliant at fixing things, and just as brilliant at *saying they did* when they didn't. OpenPitStop measures your repo with scans, seals every number so it can't be edited later, attacks your own app with a live penetration test, and checks every change your agent makes. The exit codes tell you the truth: `0` clean, `1` suspicious, `2` confirmed cheat.

Quick install

**Start here:** `npx openpitstop try .` scores any repo in about two seconds with zero install, or `npm i -g openpitstop` for daily use. No account, no config, no SaaS.

**Zero install, try it now:**

npx openpitstop try .

Scores any repo in about two seconds of scanning. The first run downloads the package once, after that it is instant.

**Install it globally (recommended for daily use):**

npm install -g openpitstop
openpitstop --help

Now every command starts with `openpitstop` instead of `npx openpitstop`.

Requires **Node.js 22+**, that is the only dependency. For the full setup (slash command, pre-commit hook, CI), see [Install](#install).

Use-Cases

You ship with an AI agent and want proof it actually finished. The gate and verify turn "the agent says done" into a pass or fail you can block a build on.
You want a security scan that proves findings, not just guesses.