Testing & Security
Testing frameworks, security tools, and best practices
9063 skills in this category
repomix
Package entire code repositories into single AI-friendly files using Repomix. Capabilities include pack codebases with customizable include/exclude patterns, generate multiple output formats (XML, Markdown, plain text), preserve file structure and context, optimize for AI consumption with token counting, filter by file types and directories, add custom headers and summaries. Use when packaging codebases for AI analysis, creating repository snapshots for LLM context, analyzing third-party libraries, preparing for security audits, generating documentation context, or evaluating unfamiliar codebases. | SỠdụng khi: đóng gói repo, pack codebase, context cho AI.
my-skill
A standalone test skill (not part of a plugin) - use for general skill testing
github-repo-setup
Use PROACTIVELY when user needs to create a new GitHub repository or set up a project with best practices. Automates repository creation with four modes - quick public repos (~30s), enterprise-grade with security and CI/CD (~120s), open-source community standards (~90s), and private team collaboration with governance (~90s). Not for existing repo configuration or GitHub Actions workflow debugging.
feature-verifier
Analyze test failures and suggest fixes for Feature Swarm verification. Use when tests fail during the verification phase to diagnose root cause and determine if automatic recovery is possible.
layer-03-security
Expert knowledge for Security Layer modeling in Documentation Robotics
pentest-coordinator
Autonomous penetration testing coordinator using ReAct methodology. Automatically activates when user provides a target IP or asks to start penetration testing. Orchestrates reconnaissance, exploitation, and privilege escalation until both user and root flags are captured. (project)
testing
Expert at Playwright E2E tests, Vitest unit tests, Storybook interaction tests. Use when writing tests, debugging test failures, or improving test coverage.
limacharlie-onboarding
Use this skill when new users want to get started with LimaCharlie, set up their first organization, or begin collecting security data. Guides beginners through org creation and helps identify what to onboard, then hands off to specialized skills.
multiplatform-dev-excellence
Expert-level guidance for developing secure, clean, and refactored code across web (React/Next.js/Node.js), iOS (Swift/SwiftUI), and Android (Kotlin/Jetpack Compose) platforms. Use when working on complex multi-platform projects requiring exceptional code quality, security best practices, architecture patterns, and maintainable codebases. Includes advanced patterns for state management, API design, authentication, testing, and cross-platform consistency.
local-clickhouse
Install, configure, and validate local ClickHouse for gapless-crypto-clickhouse development and backtesting. Use when setting up local development environment, enabling offline mode, improving query performance for backtesting, or running E2E validation. Includes mise/Homebrew/apt installation, mode detection, connection validation, and E2E workflow scripts.
oracle
Ask the oracle (GPT-5.2 with deep reasoning) strategic technical questions. Use for architecture decisions, complex debugging, security analysis, or when you need a second expert opinion. Supports background execution for long-running queries.
qa-orchestrator
Coordinates adaptive QA testing across behavioral, contract, and regression dimensions. Routes to specialized sub-agents based on context and depth.
finishing-a-development-branch
Use when implementation is complete, all tests pass, and you need to decide how to integrate the work - guides completion of development work by presenting structured options for merge, PR, or cleanup
test-notebooks
Validates Jupyter notebook execution, outputs, and educational quality metrics
test-driven-development
This skill should be used when Claude needs to determine what to test, design test structures, follow TDD practices, or decide when to skip tests. Trigger phrases include "write tests", "TDD approach", "test coverage", "what should I test", "testable vs non-testable".
e2b-sandbox
Execute AI-generated code in secure isolated E2B cloud sandboxes with advanced monitoring, MCP gateway integration (200+ tools), and multi-language support. Use for running Python/JavaScript/TypeScript/Bash code, managing sandbox lifecycle (create, pause, resume, kill, list, connect), monitoring metrics (CPU, memory, disk), handling lifecycle events, uploading/downloading files, streaming command output, environment variable management, and integrating LLMs with code execution capabilities.
review-helper
Perform a code review focused on bugs, risks, regressions, and missing tests.
nlss
Workspace-first R statistics suite with subskills and agent-run metaskills (including run-demo for guided onboarding, explain-statistics for concept explanations, explain-results for interpreting outputs, format-document for NLSS format alignment, screen-data for diagnostics, check-assumptions for model-specific checks, and write-full-report for end-to-end reporting) that produce NLSS format tables/narratives and JSONL logs from CSV/SAV/RDS/RData/Parquet. Covers descriptives, frequencies/crosstabs, correlations, t-tests/ANOVA/nonparametric, regression/mixed models, SEM/CFA/mediation, EFA, power, reliability/scale analysis, assumptions, plots, missingness/imputation, data transforms, and workspace management.
testing
Testing guide for GRE projects covering pytest-django (backend) and Vitest (frontend).Use when: writing tests, debugging test failures, setting up test fixtures, mocking.Triggers: test, pytest, vitest, unittest, mock, fixture, TestCase, assert, coverage, TDD
architecture-patterns
MVVM, Repository pattern, Dependency injection, SOLID principles. Use when designing app structure.