Testing & Security

ネットワークプロトコルセキュリティ分析。システム・アプリ・ファームウェアレベルの通信プロトコル設定を評価し、CRA Annex I.5（通信保護）への準拠を確認。Triggers on: protocol analysis, network security, communication security, DNS security, TLS analysis, HTTP/HTTPS check, cleartext traffic, CRA Annex I.5, transport security.

Conversion rate optimization (CRO) patterns for Next.js applications including CTA design, landing page layouts, trust signals, form optimization, pricing tables, and A/B testing. Use when building landing pages, optimizing CTAs, adding social proof, or improving conversion funnels.

Comprehensive plugin development toolkit for creating, testing, and managing plugins across multiple platforms with scaffolding, validation, and deployment utilities.

MUST INVOKE this skill when creating focused prompts in .prompts/prompts/ and multi-stage chains in .prompts/metaprompt/. Create, audit, and maintain all types of prompts including standalone prompts and meta-prompts for AI-to-AI workflows.

Use when creating animations that reassure users, reduce anxiety, or communicate protection and security.

Use when capturing screenshots, automating browser interactions, or scraping web content. Covers Playwright Python API for page navigation, screenshots, element selection, form filling, and waiting strategies.

Comprehensive code review specialist providing security analysis, performance optimization, maintainability assessment, and best practice recommendations across multiple programming languages

Infer and verify install/test/lint/build commands for the repo.

Use to validate process documentation. Apply TDD to skill writing: RED (run without skill, document failures) → GREEN (write skill) → REFACTOR (close loopholes). Test under pressure: time constraints, sunk cost, exhaustion, authority.

Android端末ファームウェアのセキュリティ分析。Security Patch Level (SPL) チェック、Android/Qualcomm/Samsung Security Bulletin照合、カーネルCVE確認、ファームウェアイメージ解析。Triggers on: Android firmware analysis, SPL check, security patch level, Android security bulletin, Qualcomm bulletin, Samsung security, kernel CVE, firmware security, device security assessment.

Execute E2E tests for the account service with proper server setup, test execution, and cleanup. Use when user requests account E2E testing, test execution, or running Playwright tests for account features.

Download YouTube video transcripts using Playwright browser automation. Use when user provides a YouTube URL and wants the transcript, asks to download/get/fetch captions or subtitles from a YouTube video.

macOSアプリのセキュリティレビュー。Notarization、Hardened Runtime、Sandbox、コード署名をチェック。Use when: macOS、公証、Notarization、Sandbox、署名 を依頼された時。

Use when implementing new features in Quetrex. Ensures TDD, TypeScript strict mode, Next.js App Router patterns, ShadCN UI components, and security best practices are followed. Updated for November 2025 standards.

Skill cho việc design, implement, và maintain tests hiệu quả.

Use Astro's modern web development stack including TypeScript, Tailwind CSS, Content Collections, islands architecture, and performance-first deployment practices. Use this skill when selecting technologies, configuring integrations, choosing deployment platforms, or making architectural decisions about the tech stack. When working on Astro configuration and integrations setup, choosing between SSG/hybrid/SSR rendering modes, selecting UI frameworks for interactive islands (React, Vue, Svelte), configuring Tailwind CSS or styling solutions, setting up Content Collections for type-safe content, choosing deployment adapters (Vercel, Netlify, Cloudflare), configuring testing tools (Vitest, Playwright), implementing performance optimization strategies, or adding third-party integrations and plugins.

Connect wallet to Web3 DApp - navigate to DApp, click Connect Wallet, approve in MetaMask popup, verify connection. Can be used as a test case or as a precondition for other tests.

Use when segmenting time-series into regimes, detecting structural breaks, or constructing context sets for few-shot learning. Covers GP-CPD algorithms, Matérn kernels, likelihood ratio tests, regime identification, market state transitions, volatility regime changes, and trend reversals in financial markets.

RBAC/監査ログ/秘密情報/マルチテナント越境/LLMプロンプト注入の観点でレビューする。

Guide developers through mutation testing to assess and improve test suite quality