行動開發

This skill enables automated testing of mobile applications on iOS and Android platforms using frameworks like Appium, Detox, XCUITest, and Espresso. It generates end-to-end tests, sets up page object models, and handles platform-specific elements. Use this skill when the user requests mobile app testing, test automation for iOS or Android, or needs assistance with setting up device farms and simulators. The skill is triggered by terms like "mobile testing", "appium", "detox", "xcuitest", "espresso", "android test", "ios test".

This directory contains custom skills for the RPI (Research, Plan, Implement) methodology - a structured approach to software development that ensures quality through systematic validation.

Comprehensive guide for implementing Fullstory's Element Properties API across Web, Android, and iOS platforms. Teaches proper type handling, schema construction, value formatting, and platform-specific patterns including view/cell reuse. Includes detailed good/bad examples for e-commerce, forms, and dynamic content to help developers add semantic decoration to their apps and capture business-relevant properties on interactive elements.

Create, view, and merge GitHub pull requests with validation. Use when creating PRs from branches, checking PR status, or merging approved PRs with cleanup.

This skill trains machine learning models using automated workflows. It analyzes datasets, selects appropriate model types (classification, regression, etc.), configures training parameters, trains the model with cross-validation, generates performance metrics, and saves the trained model artifact. Use this skill when the user requests to "train" a model, needs to evaluate a dataset for machine learning purposes, or wants to optimize model performance. The skill supports common frameworks like scikit-learn.

Extract file structure (functions, classes, exports) efficiently without reading entire files, using ast-grep, go doc, ctags, or other language-specific tools to get outlines and signatures

This skill enables Claude to aggregate and centralize performance metrics from various sources. It is used when the user needs to consolidate metrics from applications, systems, databases, caches, queues, and external services into a central location for monitoring and analysis. The skill is triggered by requests to "aggregate metrics", "centralize performance metrics", or similar phrases related to metrics aggregation and monitoring. It facilitates designing a metrics taxonomy, choosing appropriate aggregation tools, and setting up dashboards and alerts.

Deep codebase exploration using semantic search and relationship mapping. Use when you need to understand the current codebase.

This skill helps to identify Cross-Site Request Forgery (CSRF) vulnerabilities in web applications. It validates the implementation of CSRF protection mechanisms, such as synchronizer tokens, double-submit cookies, SameSite attributes, and origin validation. Use this skill when you need to analyze your application's security posture against CSRF attacks or when asked to "validate csrf", "check for csrf vulnerabilities", or "test csrf protection".

Skillの割当表（agent -> skills）を作るときのルール集。skill-assigner が mapping を更新するときに参照する。

Use this skill when implementing, reviewing, or debugging error handling in the Brokle codebase. This includes repository error mapping, service layer AppError constructors, handler response mapping, domain alias imports, or understanding the industrial error handling flow.

コンテキストウィンドウの制約内で情報を最適整理するためのスキル。トークン計測、優先順位付け、圧縮、検証の一連フローを提供する。Anchors:• High Performance Browser Networking / 適用: 計測とレイテンシ意識 / 目的: 予算内最適化• Designing Data-Intensive Applications / 適用: リソース制約下の設計 / 目的: 効率的な構造化• Progressive Disclosure パターン / 適用: 段階的情報開示 / 目的: 過剰読み込みの回避Trigger:Use when optimizing context window usage, measuring token budgets, prioritizing context elements, or applying compression techniques.context window optimization, token budget, context prioritization, compression, summarization

Expert IT Risk Manager with deep knowledge of ISO 27005 (IT risk management), ISO 31000 (enterprise risk management), and ISO 27001 integration. Specializes in optimizing workflows through the Data Reuse principle - leveraging existing Assets, Incidents, Controls, and Business Processes to streamline risk assessments. Automatically activated when user asks about risk management, risk assessment, risk treatment, risk appetite, risk acceptance, ISO 27005, ISO 31000, threat analysis, vulnerability assessment, or risk matrices.

Apply testing philosophy: test behavior not implementation, minimize mocks, AAA structure, coverage for confidence not percentage. Use when writing tests, reviewing test quality, discussing TDD, or evaluating test strategies.

When asked implementation questions or tool selection questions like "how do I implement", "what's the best way to", "how should I", "which library", "what tool should I use", or "how might we", search GitHub for prior art, code examples, and proven approaches before proposing solutions

Comprehensive security vulnerability analysis for codebases and infrastructure. Scans dependencies (npm, pip, gem, go, cargo), containers (Docker, Kubernetes), cloud IaC (Terraform, CloudFormation), and detects secrets exposure. Fetches live CVE data from OSV.dev, calculates risk scores, and generates phased remediation plans with TDD validation tests. Use when users mention security scan, vulnerability, CVE, exploit, security audit, penetration test, OWASP, hardening, dependency audit, container security, or want to improve security posture.

データベースの初期データ投入を安全に設計・実装・検証するスキル。開発/テスト/本番のデータ分離、シード戦略、再現性の確保を整理する。Anchors:• Designing Data-Intensive Applications / 適用: データ整合性 / 目的: 参照整合性の担保• Database Reliability Engineering / 適用: 運用設計 / 目的: 本番投入の安全性• Data Quality Principles / 適用: データ品質 / 目的: 再現性と検証性の確保Trigger:Use when planning database seeding, generating test fixtures, separating datasets by environment, or validating seed data quality.database seeding, test data, fixtures, seed strategy, environment separation, data validation

This skill enables Claude to generate Docker Compose configurations for multi-container applications. It leverages best practices for production-ready deployments, including defining services, networks, volumes, health checks, and resource limits. Claude should use this skill when the user requests a Docker Compose file, specifies application architecture involving multiple containers, or mentions needs for container orchestration, environment variables, or persistent data management in a Docker environment. Trigger terms include "docker-compose", "docker compose file", "multi-container", "container orchestration", "docker environment", "service definition", "volume management", "network configuration", "health checks", "resource limits", and ".env files".

安全で可逆的なデータベースマイグレーションを設計・運用するスキル。スキーマ変更計画、移行期間、ロールバックまでの実務フローを整理する。Anchors:• Refactoring Databases / 適用: 安全なスキーマ進化 / 目的: 破壊的変更の最小化• Drizzle Kit / 適用: マイグレーション生成 / 目的: 変更管理の自動化• Zero-Downtime Patterns / 適用: 本番適用 / 目的: サービス停止の回避Trigger:Use when planning schema changes, generating migrations, applying them safely, or defining rollback/transition strategies.database migrations, schema change, drizzle kit, rollback, zero downtime

Evaluates machine learning models for performance, fairness, and reliability using appropriate metrics and validation techniques. Trigger keywords: model evaluation, metrics, accuracy, precision, recall, F1, ROC, AUC, cross-validation, ML testing.