Testing & Security
Testing frameworks, security tools, and best practices
9063 skills in this category
specfirst
Spec-driven development methodology for ANY software project.USE WHEN developing features, fixing bugs, creating skills, or preparing releases.USE WHEN user mentions specs, testing, release process, change proposals, or deployment.Provides flexible spec tooling guidance but STRICT release discipline.
raouf-change-protocol
Before making any code changes, read AGENT.md/agent.md and changelog variants (CHANGELOG*.md, HISTORY.md, RELEASES.md). After changes, update both agent + changelog files with a "Raouf:" template entry. If blocked, search latest official developer docs and use all available tools/MCPs.
moai-security-encryption
Enterprise Encryption Security with AI-powered cryptographic architecture, Context7 integration, and intelligent encryption orchestration for data protection
testing-benchmarking-infrastructure
Testing suite with benchmarking for version-to-version performance comparison
simulation-config
Configure TraitorSim game parameters including regional rule variants (UK/US/Australia), recruitment mechanics, end-game modes, tie-breaking, and player counts. Use when setting up simulations, testing rule variants, comparing configurations, or when asked about game rules, regional variants, or simulation parameters.
skill-analyzer
Analyzes codebases to identify missing skills and recommend new ones. Invoke when user wants to audit skills, identify knowledge gaps, or determine what skills would benefit the project.
research
Use when you need to research, analyze, and plan technical solutions that are scalable, secure, and maintainable.
playwright
Playwright E2E testing with Page Object pattern, web-first assertions, and proper locators. Triggers on playwright, e2e, page object, getByRole.
azure-test-plans
Create and manage Azure Test Plans including test cases, suites, and execution. Use when setting up test plans or managing QA processes.
developer-detective
⚡ PRIMARY TOOL for: 'how does X work', 'find implementation of', 'trace data flow', 'where is X defined', 'audit integrations', 'find all usages'. Uses claudemem v0.3.0 AST with callers/callees analysis. GREP/FIND/GLOB ARE FORBIDDEN.
mongodb-authentication
Master MongoDB authentication methods including SCRAM, X.509 certificates, LDAP, and Kerberos. Learn user creation, role assignment, and securing MongoDB deployments.
planning-code-goal
Code-centric Goal-Oriented Action Planning integrated with SPARC methodology. Use for feature implementation planning, performance optimization goals, testing strategy development, or any software development objective requiring systematic breakdown with measurable success criteria.
bash-executor
Execute bash commands and scripts safely with validation, error handling, and security checks. Use for system operations, file management, text processing, and command-line tools.
frontend-responsive
Implement mobile-first responsive designs with fluid layouts, standard breakpoints, and relative units to ensure optimal viewing experiences across all device sizes from mobile to desktop. Use this skill when creating or modifying UI layouts, implementing media queries, defining responsive breakpoints, or ensuring components adapt properly to different screen sizes. Use this skill when working with component files that render layouts, grids, navigation menus, or any UI elements that need to adjust based on viewport width. Use this skill when testing UI changes across mobile, tablet, and desktop screen sizes, optimizing touch targets for mobile users, or ensuring readable typography across all breakpoints.
consistency-checker
Check components for pattern consistency and violations. Use when reviewing code, auditing components, checking for pattern violations, or validating component implementations.
prioritizing-improvements
Use when stakeholders pressure you to change technical priorities and you're tempted to compromise on security-first or call it synthesis - enforces risk-based prioritization over stakeholder preferences
android-unit-test
Эксперт Android тестирования. Используй для JUnit, Espresso и Android test patterns.
developing-ruby
Use when working with .rb files, Ruby gems, or implementing Ruby features. Covers Ruby idioms, naming conventions, enumerable patterns, service objects, error handling, and RSpec testing.
tasklist-generator
Generate high-level tasks and gated sub-tasks from a PRD, with relevant files and testing guidance.
festival-operations
Expert knowledge for running winter festival operations covering customer experience, security, vendor relations, lost & found, and marketing communications