測試與安全
測試框架、安全工具和最佳實踐
9063 skills in this category
Subcategories
lead-hunter
THE MOST CRITICAL FEATURE FOR HODGES & FOOSHEE REALTY. Ultimate distressed property intelligence system tracking 22 distress signals across financial, life event, property, legal, and market categories. Self-improving AI that monitors performance, spawns specialized skills to fix bottlenecks, runs A/B tests, and continuously optimizes lead conversion. This is the game-changer that finds homeowners in crisis BEFORE anyone else does. Use for ALL lead generation tasks, pipeline optimization, multi-source data ingestion, and automated lead intelligence.
python-unit-testing
A skill for creating comprehensive Python unit tests using pytest. It provides guidance and templates for test structure, fixtures, mocking, parameterization, and coverage. Use this when you need to write unit tests for Python code, set up a testing environment with pytest, or apply testing best practices.
policy-as-code-template-library
Production-ready policy template library: 48 battle-tested policies (28 Kyverno + 20 OPA). Pod security, image validation, RBAC, resource governance, network security, and CI/CD integration.
oscal-ssp-validator
Validates OSCAL System Security Plan documents against NIST 800-18 Rev 1 requirements and FedRAMP baselines. Identifies missing elements, quality issues, and provides remediation guidance for achieving ATO compliance.
qa-testing-methodology
QA best practices and test design patterns. Use when designing test cases to ensure comprehensive coverage with equivalence partitioning, boundary analysis, and accessibility testing.
replit-to-production
Transform Replit prototypes into production-grade applications following DHEPdevelopment standards. Automates TypeScript migration, testing setup, CI/CDconfiguration, and GitHub publishing. Handles full-stack web apps and datascience projects.USE WHEN user says 'transform replit', 'productionize', 'convert to production','replit to production', 'make production-ready', 'prototype to production','*transform', or has a Replit prototype needing professional architecture.
spider
Web crawling and scraping with analysis. Use for crawling websites, security scanning, and extracting information from web pages.
go-microservices
Production-ready Go microservices patterns including Gin, Echo, gRPC, clean architecture, dependency injection, error handling, middleware, testing, Docker containerization, Kubernetes deployment, distributed tracing, observability with Prometheus, high-performance APIs, concurrent processing, database integration with GORM, Redis caching, message queues, and cloud-native best practices.
secure-development
Security best practices for production applications including PII protection, input validation, SQL injection prevention, XSS mitigation, and secure logging. Apply when handling user data, authentication, or external inputs.
network-security
Secure GKE networking with VPC-native IP allocation, zero-trust network policies, Private Service Connect endpoints, and Cloud Armor DDoS protection layers.
audit-remediation
Apply approved remediation actions from audit resolution. Implements config file updates, template syncs, and code fixes using appropriate domain/config agents. Use when audit findings have been approved for remediation and need implementation.
perform-sweep
Design, configure, launch, and analyze ablation sweeps for GRPO training. Use for hypothesis testing, hyperparameter experiments, and systematic comparisons.
code-review
Perform thorough code review with security and quality checks. Use before commits or when reviewing PRs.
device-prober
Probe and test SDR hardware capabilities (RTL-SDR, SDRplay, HackRF, etc.). Use when verifying device detection, discovering supported sample rates and gains, testing antenna ports, or troubleshooting SDR hardware issues.
elisp-development
Emacs Lisp development best practices including file templates, project structure, testing, and coding style. Use when writing Emacs Lisp packages or configuration.
wordpress-blocks
WordPress block development including Gutenberg blocks, Block Hooks API for dynamic injection, Interactivity API for frontend features, custom post types, shortcodes, widgets, and meta boxes. Use when building blocks, adding interactivity, or creating content structures.
debugging
Auto-triggered debugging skill for bug/issue diagnosis and fix. Runs systematic root cause analysis, unit tests, deep tracing, and implements fixes.
trading-platform
Platform inventory, strategy discovery, backtesting, and optimization workflows for this trading project. Use when asked about strategies, backtesting, or what's available.
fractal-docs
Automatically add or update documentation following the Fractal Docs Protocol.自动添加或更新符合分形文档协议的文档。Use when:- Creating new source files (add [IN]/[OUT]/[POS] headers)- Creating new folders (add .folder.md)- Modifying existing files (update headers and .folder.md)- Running documentation audit- User mentions "fractal", "doc protocol", "add headers", "补全文档"
backend-fastapi
Complete FastAPI development including framework fundamentals, architecture patterns (Clean Architecture, Hexagonal Architecture, DDD), dependency injection, async patterns, and best practices. Use when implementing FastAPI endpoints, architecting backend systems, or applying architectural patterns to FastAPI applications.