qarunbook vs SkillSpector: Features, Pricing & Which Is Better (2026)
A side-by-side comparison of qarunbook and SkillSpector — features, pricing, and ideal use cases — to help you decide which AI tool fits your workflow.
qarunbook
qarunbook
qarunbook is an app testing runbook where AI drafts a test plan from your code and your team or AI works through it, tracking issues and retests.
Key features
- AI-Drafted Test Plans: The /test-checklist skill looks through your app and drafts checks with steps and expected results already filled in.
- MCP Connection: Connect Claude Code, Claude Desktop, Codex, Cursor or any MCP client so the assistant can read the plan and record results.
- Issue-to-Check Linking: Every issue sits on the check that found it with the affected platforms, and raising one removes the pass.
- Retest Flow: When an issue is fixed the check waits for someone to look again before being marked passed.
- Roles and Join Links: Give people access to only the projects they need and invite whole groups with a join link.
- Multi-App Workspaces: Keep each app's sections and platforms separate so web, driver and marketing sites are tested side by side.
- GitHub and Linear Integration: Connect issue trackers so problems found in testing flow into existing engineering workflows.
- QA Runbook Skill: The /qa-runbook skill works through the plan on web and mobile, recording each result and re-checking fixes.
Best for
- Release Testing: Run a structured test plan before each release across web, Android and iOS.
- AI-Assisted QA: Let a coding assistant execute checks and record pass/fail results through MCP.
- Team Test Coordination: Split test checklists among teammates and see progress and results in one workspace.
- Regression Follow-up: Track bugs against specific checks and retest them after fixes ship.
- Solo Developer Testing: Generate a test plan from the codebase so a one-person team knows what to check.
- Agency Multi-Client QA: Manage separate apps and clients with scoped access and a flat workspace price.
S
SkillSpector
NVIDIA
SkillSpector is NVIDIA's open-source security scanner that detects vulnerabilities, malicious patterns, and policy risks in AI agent skills.
Key features
- Vulnerability Pattern Detection: Covers 64 vulnerability patterns across 16 categories including prompt injection, data exfiltration, and privilege escalation.
- Flexible Inputs: Accepts Git repositories, URLs, zip files, directories, and single files for scanning.
- Fast Static Checks: Runs rapid static analysis by default to flag risky instructions, hidden metadata, and overbroad permissions.
- Optional LLM Semantic Analysis: Adds intent-comparison analysis powered by an LLM for issues that need deeper reasoning.
- Supply-Chain & MCP Coverage: Detects supply-chain attacks, memory poisoning, tool misuse, trigger abuse, and MCP-specific risks.
- Taint Tracking & YARA Signatures: Uses taint tracking and YARA signatures to catch dangerous code paths.
Best for
- Pre-Install Skill Vetting: Scan an agent skill before installation to decide whether it is safe to use.
- Marketplace Review: Automate risk scanning inside a skill publishing or catalog pipeline.
- Security Audits: Audit existing agent skills for prompt injection and data exfiltration risks.
- Supply-Chain Defense: Detect malicious or over-permissioned skills introduced through third-party sources.