測試與安全
測試框架、安全工具和最佳實踐
9063 skills in this category
Subcategories
reviewing-test-quality
Review React 19 test quality including coverage, patterns, and React 19 API testing. Use when reviewing tests or test coverage.
testcontainers-mysql
Garantir que testes de integração usem MySQL 9.5 via Testcontainers com isolamento, migrations e secrets corretos.
buck2-local-resources
Create Buck2 tests with local resources (processes, services, databases) using LocalResourceInfo and ExternalRunnerTestInfo. Use when tests need external dependencies like databases, HTTP servers, message queues, or Unix sockets that Buck2 should manage automatically. (project)
aptos-expert
Expert on Aptos blockchain, Move language, smart contracts, NFTs, DeFi, and Aptos development. Triggers on keywords aptos, move, blockchain, smart contract, nft, defi, web3, mainnet, testnet, devnet
testing-tdd-london
TDD London School (mockist) specialist for mock-driven, outside-in development. Use for behavior verification testing, contract-driven development, testing object collaborations, or when focusing on HOW objects interact rather than WHAT they contain.
run-gdunit4-tests
Runs the full gdunit4 test suite in a headless Godot instance and parses the 'junit_report.xml' output into structured JSON pass/fail results.
upgrade-dependencies
Periodically upgrade npm dependencies and GitHub Actions to keep project current and secure
skill-audit
Audits skills for discoverability and triggering effectiveness. Use when analyzing skill descriptions, checking trigger phrase coverage, validating progressive disclosure, reviewing SKILL.md structure, ensuring skill discoverability, testing skill triggering, improving skill descriptions, fixing skills that aren't being invoked, debugging discovery issues, or evaluating whether a skill will be invoked appropriately. Also triggers when user asks about skill best practices, wants to improve skill discoverability, or needs help with skill structure.
screenshot-beautifier
Beautify screenshots using ImageMagick - add rounded corners, drop shadows, gradient backgrounds, padding. Use when preparing screenshots for blog posts, documentation, or presentations. Transforms raw Playwright/browser screenshots into polished images.
brand-guidelines
Establish or analyze brand identity guidelines. Creates comprehensive brand documentation that frontend-design, testing, and other skills automatically reference for consistent execution.
security-basics
Apply project-specific security and privacy guardrails (auth, headers, rate limiting, logging). Use when touching authentication, request handling, metrics exposure, or anything that could leak sensitive data.
code-with-codex
Write and generate code using memex-cli with Codex backend. Use when (1) Generating code files and scripts, (2) Refactoring existing code, (3) Writing tests, (4) Creating project scaffolds, (5) Implementing algorithms or features, (6) Code review and optimization, (7) Complex multi-file projects.
smalltalk-developer
Comprehensive Pharo Smalltalk development workflow guide with AI-driven Tonel editing. Provides expertise in Tonel file format syntax (class definitions with name, superclass, instVars, category, method categories, class comment placement), package structure (package.st placement, directory organization, BaselineOf dependencies), development workflow (Edit → Import → Test cycle with absolute paths, re-import timing, test execution), and Pharo best practices (CRC format documentation, method categorization conventions). Use when working with Pharo Smalltalk projects, creating or editing Tonel .st files, organizing packages and dependencies, resolving import order issues, writing class comments, implementing standard Pharo development patterns, or troubleshooting Tonel syntax.
writing-skills
Use when creating new skills, editing existing skills, or verifying skills work before deployment - applies TDD to process documentation by testing with subagents before writing, iterating until bulletproof against rationalization
acceptance-testing
Plan and (when feasible) implement or execute user acceptance tests (UAT) /end-to-end acceptance scenarios. Converts requirements or user stories intoacceptance criteria, test cases, test data, and a sign-off checklist; suggestsautomation (Playwright/Cypress for web, golden/snapshot tests for CLIs/APIs).Use when validating user-visible behavior for a release, or mappingrequirements to acceptance coverage.
pmc-simulate-ticket
Simulate the ticket handler workflow step-by-step with real ticket system. Executes setup, implementation, testing, and finalization with explicit ENTER/EXIT stage declarations. Use this skill to debug, understand, or manually run the ticket handler workflow.
weavr-simulator
Use when testing Weavr integrations in sandbox - simulate deposits, card transactions, KYC/KYB verification, wire transfers, and 2FA challenges
writing-vitest-tests
Write Vitest tests with describe/test blocks, expect assertions, vi mocking, async testing, and parameterized tests. Use when creating or modifying test files.
security
Skill cho việc analyze, audit, và improve security của applications.
deno-core
Essential Deno TypeScript practices for ALL Deno development: configuration, imports, testing, permissions, and anti-patterns. Read this skill for any Deno project setup, dependency management, or core development work.