Testing & Security

A skill for creating comprehensive Python unit tests using pytest. It provides guidance and templates for test structure, fixtures, mocking, parameterization, and coverage. Use this when you need to write unit tests for Python code, set up a testing environment with pytest, or apply testing best practices.

Production-ready policy template library: 48 battle-tested policies (28 Kyverno + 20 OPA). Pod security, image validation, RBAC, resource governance, network security, and CI/CD integration.

Validates OSCAL System Security Plan documents against NIST 800-18 Rev 1 requirements and FedRAMP baselines. Identifies missing elements, quality issues, and provides remediation guidance for achieving ATO compliance.

QA best practices and test design patterns. Use when designing test cases to ensure comprehensive coverage with equivalence partitioning, boundary analysis, and accessibility testing.

Transform Replit prototypes into production-grade applications following DHEPdevelopment standards. Automates TypeScript migration, testing setup, CI/CDconfiguration, and GitHub publishing. Handles full-stack web apps and datascience projects.USE WHEN user says 'transform replit', 'productionize', 'convert to production','replit to production', 'make production-ready', 'prototype to production','*transform', or has a Replit prototype needing professional architecture.

Web crawling and scraping with analysis. Use for crawling websites, security scanning, and extracting information from web pages.

Production-ready Go microservices patterns including Gin, Echo, gRPC, clean architecture, dependency injection, error handling, middleware, testing, Docker containerization, Kubernetes deployment, distributed tracing, observability with Prometheus, high-performance APIs, concurrent processing, database integration with GORM, Redis caching, message queues, and cloud-native best practices.

Security best practices for production applications including PII protection, input validation, SQL injection prevention, XSS mitigation, and secure logging. Apply when handling user data, authentication, or external inputs.

Secure GKE networking with VPC-native IP allocation, zero-trust network policies, Private Service Connect endpoints, and Cloud Armor DDoS protection layers.

Apply approved remediation actions from audit resolution. Implements config file updates, template syncs, and code fixes using appropriate domain/config agents. Use when audit findings have been approved for remediation and need implementation.

Design, configure, launch, and analyze ablation sweeps for GRPO training. Use for hypothesis testing, hyperparameter experiments, and systematic comparisons.

Perform thorough code review with security and quality checks. Use before commits or when reviewing PRs.

Probe and test SDR hardware capabilities (RTL-SDR, SDRplay, HackRF, etc.). Use when verifying device detection, discovering supported sample rates and gains, testing antenna ports, or troubleshooting SDR hardware issues.

Emacs Lisp development best practices including file templates, project structure, testing, and coding style. Use when writing Emacs Lisp packages or configuration.

WordPress block development including Gutenberg blocks, Block Hooks API for dynamic injection, Interactivity API for frontend features, custom post types, shortcodes, widgets, and meta boxes. Use when building blocks, adding interactivity, or creating content structures.

Auto-triggered debugging skill for bug/issue diagnosis and fix. Runs systematic root cause analysis, unit tests, deep tracing, and implements fixes.

Platform inventory, strategy discovery, backtesting, and optimization workflows for this trading project. Use when asked about strategies, backtesting, or what's available.

Automatically add or update documentation following the Fractal Docs Protocol.自动添加或更新符合分形文档协议的文档。Use when:- Creating new source files (add [IN]/[OUT]/[POS] headers)- Creating new folders (add .folder.md)- Modifying existing files (update headers and .folder.md)- Running documentation audit- User mentions "fractal", "doc protocol", "add headers", "补全文档"

Complete FastAPI development including framework fundamentals, architecture patterns (Clean Architecture, Hexagonal Architecture, DDD), dependency injection, async patterns, and best practices. Use when implementing FastAPI endpoints, architecting backend systems, or applying architectural patterns to FastAPI applications.

Comprehensive toolkit for creating, analyzing, and visualizing complex networks and graphs in Python. Use when working with network/graph data structures, analyzing relationships between entities, computing graph algorithms (shortest paths, centrality, clustering), detecting communities, generating synthetic networks, or visualizing network topologies. Applicable to social networks, biological networks, transportation systems, citation networks, and any domain involving pairwise relationships.