Testing & Security

This skill should be used when the user asks about "browser tools", "DOM manipulation", "element labeling", "screenshot", "script injection", "page navigation", "browser automation", or needs to work with browser-related functionality in XSky.

Shared resource library for Google integration skills. DO NOT load directly - provides common references (setup, API docs, error handling, authentication) and scripts used by gmail, google-docs, google-sheets, google-calendar, and future Google skills.

Use when writing tests or implementing code. Defines RED-GREEN-REFACTOR cycle and test execution workflow.

Complete development setup: scaffolding, TypeScript, testing, CI/CD, Docker, deployment, and best practices

Run TUnit tests with Playwright. Use when user asks to run tests, execute tests, or check if tests pass.

Extract and capture screenshots of specific UI elements mentioned in QA test procedures. Use when creating visual references for test steps to show exactly what buttons, fields, and components look like.

Guide experienced developers on test structure, patterns, assertions, and test doubles for effective test-driven development

Lightning-fast quality check using parallel command execution. Runs theater detection, linting, security scan, and basic tests in parallel for instant feedback on code quality.

Use when you need to plan technical solutions that are scalable, secure, and maintainable.

Expert guidance for researching, documenting, and integrating Model Context Protocol (MCP) servers and tools. Covers MCP architecture, server/client implementation patterns, tool discovery, integration workflows, security best practices, and multi-language SDK usage (Python, TypeScript, C#, Java, Rust). Enables seamless integration of MCP tools into Claude Code and AI applications.

This skill should be used when the user asks about "festival operations", "event management", "vendor management", "lost and found procedures", "security protocols", "customer service at events", "handling difficult customers", "festival emergencies", "marketing communications", or discusses managing festivals, winter events, or public gatherings.

Docker Compose configuration template and validation logic for MetaSaver monorepos. Includes 4 required standards (PostgreSQL service with project-prefixed env vars like RUGBYCRM_POSTGRES_USER or METASAVER_SILVER_POSTGRES_USER for multi-db, project-specific naming for containers and networks, volumes section, service health checks). Use when creating or auditing docker-compose.yml files.

OWASP Top 10, SAST/DAST, dependency security, and secrets management.

This skill should be used when the user says "let's land the plane", "land the plane", "end the session cleanly", "wrap up the session", or asks to prepare for a clean handoff between coding sessions. Provides a systematic protocol for ensuring all work is committed, tested, tracked, and ready for the next session.

Builds and manages iOS/macOS apps using xcodebuild and xcrun simctl CLI tools. Use when working with Xcode projects, running apps in simulators, managing simulator instances, taking screenshots, capturing logs, running tests, or automating builds.

Use when performing UI testing with Chrome DevTools MCP in a multi-agent worktree environment - ensures proper Chrome instance isolation to prevent cross-contamination between agents

Security scanning tools (gosec, govulncheck). Use when running security analysis.

Senior Frontend Code Reviewer with 12+ years JavaScript/TypeScript experience. Use when reviewing React/TypeScript code, checking code quality and style, verifying accessibility compliance, ensuring test coverage, or configuring linting tools (ESLint, Prettier).

TheGraph subgraph development with AssemblyScript handlers, schema definitions, and Matchstick testing. Triggers on subgraph, thegraph, graphql, mapping.ts.

Guide to designing and implementing tools for the vscode-copilot-chat extension, including patterns, testing, and best practices