Testing & Security
Testing frameworks, security tools, and best practices
9063 skills in this category
raffle-winner-picker
Picks random winners from lists, spreadsheets, or Google Sheets for giveaways, raffles, and contests. Ensures fair, unbiased selection with transparency.
documentation-writer
This skill should be used when an agent is assigned to write a section of technical documentation. Provides guidance on breaking down large tasks, using doc-coauthoring workflow, and coordinating with VibeKanban task management. Use when task description mentions "write section", "document this component", or "expand documentation".
localStorage-patterns
Comprehensive guide to localStorage patterns for the Plataforma B2B de treinamento técnico corporativo educational platform. This skill covers schema design, error handling strategies, quota management, and synchronization patterns essential for building resilient web applications with client-side persistence. Learn how to handle common localStorage errors (QuotaExceededError, SecurityError, DOMException), implement graceful degradation, manage storage quotas (5-10MB browser limits, 50KB per note), and sync localStorage with React state. The skill emphasizes defensive programming, user-friendly error messages, and fallback strategies. Real-world examples are taken directly from the project codebase, including CNotesView, BashNotesView, and auto-save patterns used across 5 learning systems. Each pattern is demonstrated with production code showing how localStorage is used to persist 227 educational modules' progress and user notes. Key topics include try/catch patterns for all localStorage operations, QuotaExceededError handling (clear old data, warn user), SecurityError handling (private browsing detection), schema design for JSON storage, versioning strategies, migration patterns, and testing localStorage in different browser contexts. This skill is essential for implementing US-041 (localStorage error handling), US-042 (persist module progress), refactoring auto-save logic into custom hooks (useAutoSaveNotes), and maintaining data integrity across the educational platform. Includes troubleshooting guides for common issues encountered in production.
astro-testing
Testing and QA gate for Astro lead gen sites. Manual + E2E + A11y + Performance. FAIL = no deploy.
lorairo-test-generator
Generate pytest unit, integration, and GUI tests for LoRAIro with proper fixtures, mocks, and 75%+ coverage using pytest-qt for PySide6 testing
godot
Develop, test, build, and deploy Godot 4.x games. Includes GdUnit4 for GDScript unit tests and PlayGodot for game automation and E2E testing. Supports web/desktop exports, CI/CD pipelines, and deployment to Vercel/GitHub Pages/itch.io.
property-based-testing
How to make a good property-based test. Use when writing any property-based test.
generating-nest-servers
PRIMARY expert for ALL NestJS and @lenne.tech/nest-server tasks. ALWAYS use this skill when working in projects with @lenne.tech/nest-server in package.json dependencies (supports monorepos with projects/*, packages/*, apps/* structure), or when asked about NestJS modules, services, controllers, resolvers, models, objects, tests, server creation, debugging, or any NestJS/nest-server development task. Handles lt server commands, security analysis, test creation, and all backend development. ALWAYS reads CrudService base class before working with Services.
critic
Comprehensive code quality workflow that analyzes code for issues, creates improvement plan, and optionally applies refactoring. Use when the user asks to "critic my code", "review and improve this", "ensure code quality", "analyze and fix", or wants a complete quality audit with optional improvements.
implement
Guided workflow for implementing features with quality gates. Use when building new features - includes spec, test-first, implementation, and verification steps.
auth-handler
Manage authentication, authorization, and user sessions. Use when dealing with login, sign-up, API protection, middleware, or user data fetching.
sdlc
Complete Software Development Life Cycle workflow for Linear issues. Coordinates requirements analysis, TDD setup, implementation, testing, and PR creation through agent chaining. Use when starting work on Linear issues, implementing features from Linear, or when user mentions SDLC workflow, Linear issue development, test-driven development, or feature implementation workflow.
dev-environment-wizard
Interactive setup wizard for development environments. ALWAYS trigger first when users want to set up, create, or initialize a new development environment. Asks discovery questions about tech stack, services, and preferences, then coordinates other skills (zero-to-running, database-seeding, git-hooks, local-ssl, env-manager) to generate a customized environment.
oidc-azure-identity-setup
Configures secure authentication with Azure using OIDC (OpenID Connect). Eliminates long-lived secrets by integrating GitHub Actions with Azure AD for secure resource access.
research
Use when you need to research, analyze, and plan technical solutions that are scalable, secure, and maintainable.
persistence-layer-audit
Audit SQLite persistence layer for unused tables and broken integrations. Trigger when: (1) checking database usage, (2) cleaning up schema, (3) finding missing methods.
unit-tests
Write pytest tests using Test-Driven Development (TDD). Use when implementing features, fixing bugs, or when the user mentions testing, TDD, or pytest. Tests should be written BEFORE implementation code.
code-review
Comprehensive read-only code review analyzing code quality, security vulnerabilities, performance issues, best practices compliance, and VSCode diagnostics. Use when user asks to review code, check for errors, analyze code quality, mentions security review, or wants feedback on their code.
Unnamed Skill
Use when validating project structure during Standards Audit phase. Detects package type from package.json metasaver.projectType, loads structure rules from domain skills (react-app-structure, prisma-database, contracts-package), scans created/modified files, and reports violations with fix suggestions. File types: .tsx, .ts, directory layouts.
tdd
Test Driven Development (TDD) workflow automation for Java Spring Boot projects. Use for writing tests, checking coverage, generating test scaffolds, and implementing Red-Green-Refactor cycles with JUnit 5, Mockito, and Testcontainers.