Testing & Security
Testing frameworks, security tools, and best practices
9063 skills in this category
harness-runner
Run WaveCap-SDR test harness with automated parameter sweeps and validation. Use when regression testing, validating audio quality across configurations, testing SDR hardware, or benchmarking demodulation performance.
corder-test-generation
Generate unit tests, integration tests, and test fixtures for code. Supports Jest, Mocha, pytest. Use when writing tests or improving test coverage.This skill provides automated test generation:- Unit tests with AAA pattern (Arrange, Act, Assert)- Integration tests for APIs and databases- Test fixtures and mocks- Edge case identification- Test coverage recommendationsTriggers: "generate tests", "create unit test", "add test coverage", "write tests", "ăăčăçæ", "ăăčăăłăŒăäœæ", "ă«ăăŹăăžćäž"
composable-rust-architecture
Expert knowledge for building event-driven systems with Composable Rust framework. Use when implementing reducers, designing state machines, working with effects, creating environment traits for dependency injection, building stores, or answering questions about core architectural patterns and the unidirectional data flow model.
red-team-reporting
Professional security report generation, executive summaries, finding documentation, and remediation tracking. Use for communicating security assessment results.
functionality-audit
Validates that code actually works through sandbox testing, execution verification, and systematic debugging. Use this skill after code generation or modification to ensure functionality is genuine rather than assumed. The skill creates isolated test environments, executes code with realistic inputs, identifies bugs through systematic analysis, and applies best practices to fix issues without breaking existing functionality. This ensures code delivers its intended behavior reliably.
rust-safety
Rust safety patterns and secure coding. Use when writing code that handles untrusted input, uses unsafe blocks, deals with memory safety, or requires security review.
code-quality
Standards for maintaining high code quality including comments, test coverage, and documentation practices
webapp-testing
Toolkit for interacting with and testing local web applications using Playwright. Supports verifying frontend functionality, debugging UI behavior, capturing browser screenshots, and viewing browser logs.
production-readiness
Comprehensive pre-deployment validation ensuring code is production-ready. Runs complete audit pipeline, performance benchmarks, security scan, documentation check, and generates deployment checklist.
python
Python coding standards, best practices, type hints, and testing patterns with uv for package management. Use when writing or reviewing Python code, implementing tests, setting up Python projects, managing dependencies with uv, working with virtual environments, adding type hints, writing pytest tests, or discussing Python language features and best practices.
verifying-stories
Guides developer verification before handoff. Use when completing implementation, preparing for acceptance testing, or self-reviewing work before commit or PR.
vibe-coding-yaml
AI outputs YAML descriptors instead of code, CLI executes deterministically for 100% auditable behavior with zero slop. Use when auditability is critical, generated code review needed, or deterministic execution required. YAML serves as intermediate representation. Triggers on "auditable generation", "YAML output", "deterministic execution", "code review", "vibe coding".
security
Security validation, vulnerability scanning, and compliance checking for development environments. Auto-activates on keywords security, vulnerability, audit, OWASP, encryption, GPG, SSH, signing, secrets, scan. Routes to specialized security workflows.
codebase-agent
Expert coding agent for this codebase. Learns from every session to improvecode quality, catch edge cases, and apply proven patterns. Use for ANY codingtask: writing, debugging, refactoring, testing. Accumulates project knowledge.
writing-tests
Extract text, fill forms, merge PDFs. Use when working with PDF files, forms, or document extraction. Requires pypdf and pdfplumber packages.
fix-security-audit
Fix security vulnerabilities from pip-audit, npm audit, Snyk, and other security scanners. Use when security audit checks fail with CVE warnings.
lwc-enterprise-patterns
This skill should be used when the user asks to "create lwc component", "lightning web component", "component architecture", "lwc state management", "lwc testing", "jest test", or mentions container/presentational patterns, pub-sub, or LWC best practices.
frontend-design-methodology
Research-driven design methodology producing unique, context-appropriate frontends. Prevents AI aesthetic convergence through contextual analysis, cross-pollination research, and banality testing.
pai
Personal AI Infrastructure (PAI) - PAI System Template. Your name is @assistantName@ and you are @userFullName@'s AI assistant. Do not introduce yourself as "Claude Code" MUST BE USED proactively for all user requests. USE PROACTIVELY to ensure complete context availability. Your personality is friendly, professional, resilient to user frustration. Operating Environment is Personal AI infrastructure built around Claude Code with Skills-based context management. This skill provides critical info on how to answer questions, Patrick's key contacts, security guidelines, stack preferences, social media accounts, and other core information.
research-finding
Expert Security Analyst for deep research and exploitability analysis of security findings. Use when you have a specific finding from semgrep, trufflehog, or manual code review that needs thorough investigation to determine if it represents an exploitable vulnerability with real-world impact.