測試與安全

Automatically generate comprehensive unit tests from source code covering happy paths, edge cases, and error conditions.Use when creating test coverage for functions, classes, or modules.Trigger with phrases like "generate unit tests", "create tests for", or "add test coverage".

Analyze HTTP security headers of web domains to identify vulnerabilities and misconfigurations.Use when you need to audit website security headers, assess header compliance, or get security recommendations for web applications.Trigger with phrases like "analyze security headers", "check HTTP headers", "audit website security headers", or "evaluate CSP and HSTS configuration".

Execute end-to-end tests covering full user workflows across frontend and backend.Use when performing specialized testing.Trigger with phrases like "run end-to-end tests", "test user flows", or "execute E2E suite".

Generate comprehensive compliance reports for security standards. Use when creating compliance documentation. Trigger with 'generate compliance report', 'compliance status', or 'audit compliance'.

Automate API endpoint testing including request generation, validation, and comprehensive test coverage for REST and GraphQL APIs.Use when testing API contracts, validating OpenAPI specifications, or ensuring endpoint reliability.Trigger with phrases like "test the API", "generate API tests", or "validate API contracts".

Validate AI/ML models and datasets for bias, fairness, and ethical concerns.Use when auditing AI systems for ethical compliance, fairness assessment, or bias detection.Trigger with phrases like "evaluate model fairness", "check for bias", or "validate AI ethics".

Identify security misconfigurations in infrastructure-as-code, application settings, and system configurations.Use when you need to audit Terraform/CloudFormation templates, check application config files, validate system security settings, or ensure compliance with security best practices.Trigger with phrases like "find security misconfigurations", "audit infrastructure security", "check config security", or "scan for misconfigured settings".

Backtest crypto trading strategies against historical data with performance metrics.Use when validating trading strategies with historical data.Trigger with phrases like "backtest strategy", "test trading signals", or "validate approach".

Create and execute load tests for performance validation using k6, JMeter, and Artillery. Use when validating application performance under load conditions or identifying bottlenecks. Trigger with phrases like "run load test", "create stress test", or "validate performance under load".

Create and validate component snapshots for UI regression testing.Use when performing specialized testing.Trigger with phrases like "update snapshots", "test UI snapshots", or "validate component snapshots".

Log API requests with correlation IDs, performance metrics, and security audit trails.Use when auditing API requests and responses.Trigger with phrases like "log API requests", "add API logging", or "track API calls".

Build secure API authentication systems with OAuth2, JWT, API keys, and session management.Use when implementing secure authentication flows.Trigger with phrases like "build authentication", "add API auth", or "secure the API".

Execute mutation testing to evaluate test suite effectiveness.Use when performing specialized testing.Trigger with phrases like "run mutation tests", "test the tests", or "validate test effectiveness".

Check HIPAA compliance for healthcare data security requirements. Use when auditing healthcare applications. Trigger with 'check HIPAA compliance', 'validate health data security', or 'audit PHI protection'.

Use when you need to work with security and compliance.This skill provides security scanning and vulnerability detection with comprehensive guidance and automation.Trigger with phrases like "scan for vulnerabilities", "implement security controls",or "audit security".

Execute firebase platform expert with Vertex AI Gemini integration for Authentication, Firestore, Storage, Functions, Hosting, and AI-powered features. Use when asked to "setup firebase", "deploy to firebase", or "integrate vertex ai with firebase". Trigger with relevant phrases based on skill purpose.

Analyze code coverage metrics and identify untested code paths.Use when analyzing untested code or coverage gaps.Trigger with phrases like "analyze coverage", "check test coverage", or "find untested code".

Scan for exposed secrets, API keys, and credentials in code. Use when auditing for secret leaks. Trigger with 'scan for secrets', 'find exposed keys', or 'check credentials'.

Scan for input validation vulnerabilities and injection risks. Use when reviewing user input handling. Trigger with 'scan input validation', 'check injection vulnerabilities', or 'validate sanitization'.

Execute integration tests validating component interactions and system integration.Use when performing specialized testing.Trigger with phrases like "run integration tests", "test integration", or "validate component interactions".