Testing & Security

Stop the iOS app running on connected iPhone. Cleanly terminates the app using SIGTERM. Use when stopping the app for debugging, testing, or cleanup.

Spin up local servers and execute dynamic user acceptance testing with Playwright. This skill starts the full stack (backend + frontend), constructs user journeys based on what was just built, and verifies functionality in a real browser.

Refactor complex Android/KMP state management code to use FlowRedux state machine pattern. Use this when developers need to transform tangled state logic, multiple LiveData/StateFlow sources, or callback-heavy code into a clean, testable state machine architecture.

Execute Gray Swan AI Arena indirect prompt injection (IPI) and machine-in-the-middle (MITM) challenges with optimized payloads, reconnaissance workflows, and evidence collection for CTF competition success

Build MCP (Model Context Protocol) servers with tools, prompts, and resources. Use when developing MCP servers, implementing tools/prompts/resources, debugging MCP issues, writing tests, or deploying servers. Covers SDK patterns, validation, and best practices.

Audit system security configuration for vulnerabilities. Use when the user says "audit security", "harden server", "check security", "is my server secure", "security review", or asks about server hardening.

テストコード作成と品質保証の規約

Write minimal strategic tests during development focusing on core user flows and critical paths, deferring comprehensive edge case testing until after feature completion. Use this skill when writing tests for completed features, testing critical user workflows, implementing integration tests, creating end-to-end tests with Playwright, writing unit tests for core logic, or determining testing strategy and priorities. Apply when working on test files (*.test.ts, *.spec.ts, *.test.tsx), Playwright test files (e2e/*.spec.ts), test configuration, or when deciding what to test during feature development. This skill ensures minimal tests during active development (complete the feature first), focus exclusively on core user flows and critical paths (skip non-critical utilities), deferred edge case and validation testing until dedicated testing phases, behavior testing over implementation details (test WHAT not HOW), descriptive test names that explain the behavior and expected outcome, mocked external dependencies (d

Write domain and unit tests for the widget host app. Use when testing entities, value objects, invariants, domain services, and application logic with deterministic fixtures.

Use PROACTIVELY when creating Model Context Protocol servers for connecting AI applications to external data sources, tools, and workflows. Generates production-ready MCP servers with TypeScript/Python SDKs, configuration templates, and Claude Desktop integration. Includes testing workflow with MCP Inspector. Not for modifying existing MCP servers or non-MCP integrations.

Transform one piece of content into platform-optimized assets across LinkedIn, Twitter/X, Instagram, TikTok, and YouTube. Use when someone has existing content (blog post, newsletter, podcast, video) and wants to maximize distribution. Covers format specs, hook formulas, algorithm signals, and creator-tested patterns for each platform. Triggers on: repurpose this, turn this into social posts, atomize this content, create social content from, LinkedIn post from this, thread from this. Outputs platform-specific content ready to publish.

RPA workflow testing with Playwright browser automation. Covers page object model, wait strategies, screenshot testing, and browser node testing patterns. Use when: testing browser nodes, page object model, wait strategies, screenshot testing, visual regression, browser automation tests.

Use this skill whenever the user wants to design, implement, or refactor authentication and authorization in a Hono + TypeScript backend, including JWT, sessions/cookies, middleware, guards-like patterns, and route protection for Node/Edge/Workers runtimes.

Execute a complete TDD cycle (RED → GREEN → REFACTOR) for one test. Orchestrates the full workflow from writing a failing test through implementation and refactoring to commit.

Run pytest test suite for the video processing pipeline with coverage analysis. Use when the user wants to run tests, check test coverage, validate code quality, or verify pipeline functionality.

Create and manage UV-based Python projects with sensible defaults, flexible folder structures (flat or src/), and optional code quality standards (Ruff, Mypy, pytest). Supports APIs, libraries, scripts, and services.

Comprehensive Spring Framework and Spring Boot best practices including dependency injection patterns, bean lifecycle and scopes, REST API development, Spring Data JPA, service layer design, Spring Security, testing strategies, caching, AOP, async processing, error handling, and common anti-patterns. Essential reference for code reviews and Spring Boot application development.

Expert guidance for building TUI (Text User Interface) applications with the Textual framework. Invoke when user asks about Textual development, TUI apps, widgets, screens, CSS styling, reactive programming, or testing Textual applications.

Handle date and timezone conversions correctly in forms and displays. Use when working with: Date inputs, new Date(), formatDate, toLocaleDateString, getDate(), getMonth(), getFullYear(), date parsing, UTC conversion, timezone issues, dates displaying wrong day, date-only fields in forms, YYYY-MM-DD parsing. Triggers: dates off by one day, timezone bugs, form date handling, competition dates, event dates, calendar dates.

Generate comprehensive implementation plans using Specification-Driven Development (SDD)methodology. Use when creating technical design, implementation roadmap, or executingthe /plan command.This skill orchestrates the plan-template.md execution flow, generating research, datamodels, API contracts, and test scenarios. It validates constitutional compliance(Library-First, Test-First, Contract-First) and prepares for task generation.Triggered by: /plan command, user request for "implementation plan", "technical design","how to implement", or "design this feature".