測試與安全
測試框架、安全工具和最佳實踐
9063 skills in this category
Subcategories
evidence-artifact-collector
Generates CLI commands and API scripts to collect point-in-time evidence for audit controls. Automates evidence gathering from cloud providers (AWS, Azure, GCP) and outputs formatted reports.
loki-logql-query-specialist
Query and analyze logs using Loki and LogQL. Provides patterns for correlation ID tracing, error investigation, and service debugging using HuleEdu's structured logging. Integrates with Context7 for latest Loki documentation.
browser-content-capture
Capture content from JavaScript-rendered pages, login-protected sites, and multi-page documentation using Playwright MCP tools or Claude Chrome extension. Use when WebFetch fails on SPAs, dynamic content, or auth-required pages.
review-code-quality
Use when reviewing code for quality, security vulnerabilities, and best practices
database-migration
Safe database migration procedures with backward compatibility, backups, and rollback strategies. Use when creating, modifying, or dropping database schemas. Covers migration creation, testing, execution, and rollback.
reflection-review
Claude Code 작업 결과를 6개 영역(분석, 계획, 구현, 리뷰, 검증, 테스트)에서 평가하고 구체적인 피드백을 생성합니다. 결과 수집, 영역별 점수화, P0/P1/P2 우선순위 피드백, 자기비판, 성찰, 재평가 사이클을 통해 품질을 개선합니다. Use when evaluating code results, generating feedback, reviewing implementation quality, assessing test coverage.
security-first
Universal security checklist and fixes for ANY project type or language
api-tools
API testing, documentation, and development tools
better-auth-ts
Better Auth TypeScript/JavaScript authentication library. Use when implementing auth in Next.js, React, Express, or any TypeScript project. Covers email/password, OAuth, JWT, sessions, 2FA, magic links, social login with Next.js 16 proxy.ts patterns.
shopify
Build Shopify applications, extensions, and themes using GraphQL/REST APIs, Shopify CLI, Polaris UI components, and Liquid templating. Capabilities include app development with OAuth authentication, checkout UI extensions for customizing checkout flow, admin UI extensions for dashboard integration, POS extensions for retail, theme development with Liquid, webhook management, billing API integration, product/order/customer management. Use when building Shopify apps, implementing checkout customizations, creating admin interfaces, developing themes, integrating payment processing, managing store data via APIs, or extending Shopify functionality.
wavecap-evaluate
Evaluate WaveCap audio analysis and transcription accuracy. Use when the user wants to run regression tests, compare transcriptions against ground truth, calculate WER/CER metrics, or assess overall system quality.
vague
Use when writing Vague (.vague) files - a declarative language for generating realistic test data with superposition, constraints, and cross-references
workspace-setup
B1_02 phase workspace setup protocol including npm outdated, npm audit, TypeScript version validation, quality gates enforcement. Ensures dependencies current, security patches applied, and workspace ready for implementation.
gcloud-expert
Expert-level Google Cloud CLI (gcloud) skill for managing GCP resources. This skill should beused when working with gcloud commands, gcp, google cloud, cloud run, cloud scheduler, alloydb,cloud storage, gcs buckets, firebase deploy, gcloud auth, gcloud config, service accounts,workload identity federation, iam permissions, or artifact registry. Use this to install gcloudon macOS, Windows, or Linux. Use this to manage multi-account configuration of GCP with gcloud.Use this to configure authentication on GCP with gcloud for OAuth, service accounts, andWorkload Identity Federation (WIF). Use this to set up IAM roles, permissions, and governance.Use this to deploy applications to Cloud Run or Firebase. Use this to manage database instancesincluding AlloyDB and Cloud SQL. Use this to configure GitHub Actions or Cloud Build CI/CDpipelines. Use this to set up Docker container deployments. Use this to write bash scripts forGCP automation. Use this to manage git-triggered deployments or configure API authent
run-client
Start a single Gambit game client that connects to 127.0.0.1:1234. Use when the user wants to run a client, test client functionality, or manually connect to a server.
xterm-js
This skill should be used when working with xterm.js terminal implementations, React-based terminal applications, WebSocket terminal communication, or refactoring terminal-related code. It provides battle-tested patterns, common pitfalls, and debugging strategies learned from building production terminal applications.
create-feature-pr
Create a new feature branch, implement feature work, commit with commit-message, and open a PR with gh using standardized templates. Use when the user asks to develop a new feature, start a feature branch, or open a feature PR; also when asked to draft a feature PR based on the latest commit message.
running-tests
Runs tests and handles failures. Triggered when: test execution, verification, test failures, CI checks.
docs-review
Review and improve repository documentation including both human-readable docs (`docs/`), `README.md`, and AI agent memory context files (`CLAUDE.md`, `CODEX.md`, `AGENTS.md`, `.cursorrules`, etc.) for clarity, minimal duplication, and modularity. Use when asked to review, audit, refactor, or improve documentation structure, consolidate rules, reduce redundancy, establish shared standards, or modularize monolithic instruction files.
network-conftest-generator
生成并配置用于新华三技术有限公司H3C网络设备自动化的 pytest `conftest.py`,`conftest.py`文件主要负责测试背景搭建和测试背景清理。