Testing & Security
Testing frameworks, security tools, and best practices
9063 skills in this category
workflow-orchestration
Standard agent pipelines for audit, coding, new project, refactor, and simple workflows. Defines 5 workflow types with specific agent sequences (AUDIT: BA→PM→Workers→Reviewer→PM, CODING: Architect→PM→Workers→Validator→Reviewer→PM, NEW_PROJECT and REFACTOR follow coding pipeline, SIMPLE: direct processing). Includes agent contracts, workflow detection logic, and orchestration best practices. Use when /ms command needs to determine workflow type and coordinate multi-agent execution.
dsp-filter-designer
Design and test DSP filters (highpass, lowpass, bandpass, notch) for WaveCap-SDR. Use when adding filters to demodulation pipeline, debugging filter response, or tuning cutoff frequencies and rolloff characteristics.
financial-controls-automation
Financial close acceleration, reconciliation automation, and audit readiness for controllers managing month-end/quarter-end close processes
reply-to-text
Review text message conversations with a specified contact and send appropriate replies with cheerful tone and humor using Arlen's authentic writing style. This skill should be used when the user says "reply to [name]'s text", "respond to [name]", "text [name] back", or wants to send contextual replies to contacts. Automatically handles contact lookup and conversation review via subagent delegation. Integrates email skill writing style guide for authentic voice. Considers ALL messages received from contact since last reply (not just latest). TRIGGER PHRASES - "reply to", "respond to", "text back", "answer [name]'s message".
bun-expert
Comprehensive Bun runtime expertise covering all major features.Use when working with Bun projects, migrating from Node.js, or leveraging Bun-specific APIs.Activates for: Bun.serve, Bun.file, bun:test, bun:sqlite, bun install, bun build,bunfig.toml, TypeScript in Bun, package manager operations, bundler configuration,and Node.js compatibility questions.
rn-visual-testing
Visual testing skill for React Native apps across iPhone models. Use when testing app appearance on iPhone 11 through 17 (all variants including Pro, Pro Max, Plus, Mini, Air, and SE). Covers screenshot capture, simulator configuration, screen dimension validation, safe area handling, Dynamic Island/notch compatibility, and pixel-perfect verification across all iPhone screen sizes and resolutions.
testflight
TestFlight and App Store distribution guide. Use when preparing app for TestFlight, creating production builds, or submitting to App Store Connect.
baml-codegen
Generates production-ready BAML applications from natural language requirements. Creates complete type definitions, functions, clients, tests, and framework integrations for data extraction, classification, RAG, and agent workflows. Queries official BoundaryML repositories via MCP for real-time patterns. Supports multimodal inputs (images, audio), 6 programming languages (Python, TypeScript, Ruby, Java, Go, C#), 10+ frameworks, 50-70% token optimization, and 95%+ compilation success.
image-processor-guidelines
Development guidelines for Quantum Skincare's Python FastAPI image processor microservice. Covers FastAPI patterns, Perfect Corp API integration, MediaPipe FaceMesh validation, correlation headers, access control (CIDR + X-Internal-Secret), error handling, Pydantic models, structured logging, mock mode, provider normalization, and testing strategies. Use when working with image-processor code, routes, validation pipeline, Perfect Corp integration, or Python/FastAPI patterns.
agent-card-templates
A2A agent card JSON templates with schema validation and examples for different agent types. Use when creating agent cards, implementing A2A protocol discovery, setting up agent metadata, configuring authentication schemes, defining agent capabilities, or when user mentions agent card, agent discovery, A2A metadata, service endpoint configuration, or agent authentication setup.
babel-config
Generates Babel configuration for JavaScript transpilation in tests. Creates babel.config.js file.
testing-strategy
Guidelines for writing effective tests in this project
backend-api-development
Master backend development, API design, server architecture, database integration, authentication, microservices, and production patterns. Includes Node.js, GraphQL, Spring Boot, ASP.NET Core, and PHP frameworks.
webapp-testing
Toolkit for interacting with and testing local web applications using Playwright. Supports verifying frontend functionality, debugging UI behavior, capturing browser screenshots, and viewing browser logs.
unsplash
Download and manage images from Unsplash API. Use when needing stock photos, hero images, or any free images for projects. Handles API authentication, search, download with proper attribution, and image optimization.
github-repo-analysis
Comprehensive GitHub repository analysis for health assessment, monetization opportunities, financial audits, competitive intelligence, and TECHNICAL DRIFT detection. Use when users ask to analyze repositories, audit GitHub portfolios, find revenue opportunities, assess repo health, evaluate monetization readiness, detect spec-vs-implementation gaps, or extract competitive insights from forks.
finish-feature
Complete feature work and merge back to main branch. Use when user wants to finish a feature, close a feature, or merge feature branch. Switches to main, pulls latest changes, merges feature branch, and pushes to remote.
storybook
Documents components with Storybook using CSF 3.0, controls, and MDX. Use when creating component catalogs, interactive examples, visual testing setups, or design system documentation sites.
fastapi-developer
[Extends backend-developer] Python FastAPI specialist. Use for FastAPI apps, async endpoints, Pydantic v2, SQLAlchemy async, dependency injection. Invoke alongside backend-developer for Python API projects.
ai-cross-validator
Dual-AI code validation using both Claude and Google Gemini to catch 20% more issues. Validates React Native screens for security vulnerabilities, performance anti-patterns, accessibility gaps, and best practices. Use when user says "validate with Gemini", "cross-validate", "AI review", or before deploying code to production.