測試與安全
測試框架、安全工具和最佳實踐
9063 skills in this category
Subcategories
sql-server-admin
SQL Server administration and maintenance. Use for database backups, security, user management, maintenance tasks, monitoring, and troubleshooting.
bun-testing
Testing guidelines for Bun/TypeScript projects using bun:test framework. Use when writing tests, creating test files, debugging test failures, setting up mocks, or reviewing test code. Triggers on *.test.ts files, test-related questions, mocking patterns, and coverage discussions.
claude-code-subagent-creator
Create Claude Code subagents from natural language requirements. Use when users want to create specialized AI subagents for Claude Code without manually writing the configuration. Handles agent creation for testing, code review, debugging, documentation, refactoring, and custom workflows. Generates .claude/agents/*.md files with appropriate YAML frontmatter and system prompts.
mock-infrastructure-engineer
Creates and optimizes MSW (Mock Service Worker) handlers for Playwright E2E tests, implementing handler caching, fixture management, and AI Gateway mocking patterns. Use when mock setup is slow or test data needs centralization.
moai-cc-settings
Configuring Claude Code settings.json & Security. Set up permissions (allow/deny), permission modes, environment variables, tool restrictions. Use when securing Claude Code, restricting tool access, or optimizing session settings.
debugging
Systematic debugging framework ensuring root cause investigation before fixes. Includes four-phase debugging process, backward call stack tracing, multi-layer validation, and verification protocols. Use when encountering bugs, test failures, unexpected behavior, performance issues, or before claiming work complete. Prevents random fixes, masks over symptoms, and false completion claims.
visibility-pattern-guardian
Enforces visibility pattern for testability by detecting private methods that prevent unit testing (causes 20-40% coverage loss). References authoritative style guides rather than duplicating. Auto-refactors code to private[module] object pattern with user approval. Detects inline lambdas and suggests extraction to named functions ("laws"). Blocks during scala-ninja review (Phase 2) as peer review rejection point.
playwright-setup
Playwright E2E testing setup and configuration. Use when setting up end-to-end tests.
harness-ci
Harness CI (Continuous Integration) for container-native builds with test intelligence, caching, parallelization, and build infrastructure management
wordpress-themes
WordPress custom theme development specialist focused on clean, maintainable code following VIP standards. Includes modular theme structure, dart-sass via Homebrew, proper script/style enqueueing, template parts organization, text domain management, and comprehensive security practices (escaping, sanitization, file paths).
code-reviewer
Review code for quality, security, and best practices. Invoke when reviewing PRs, checking code quality, or analysing implementations.
check-a11y
Perform accessibility audit on web pages. Use when users ask to check accessibility, audit WCAG compliance, verify ARIA usage, check color contrast, audit keyboard navigation, or analyze screen reader compatibility. Detects ARIA issues, focus problems, contrast issues, and semantic HTML violations.
workflow-patterns
Industry-specific workflow patterns and templates for finance, healthcare, logistics, manufacturing, retail, and common use cases like AI document processing, API integration, business rules, ETL, RAG, security, and project management. Use when asking about 'workflow examples', 'workflow templates', 'industry workflows', 'finance workflows', 'healthcare workflows', 'logistics workflows', 'manufacturing workflows', 'retail workflows', 'ETL workflows', 'RAG workflows', 'API workflows', 'document processing', 'business rules', or 'workflow patterns'.
bats-testing-patterns
Master Bash Automated Testing System (Bats) for comprehensive shell script testing. Use when writing tests for shell scripts, CI/CD pipelines, or requiring test-driven development of shell utilities.
wordpress-testing-qa
WordPress plugin and theme testing with PHPUnit integration tests, WP_Mock unit tests, PHPCS coding standards, and CI/CD workflows
phoenix-liveview
Phoenix Framework with LiveView on the BEAM. Covers OTP foundations, context-driven domain modeling, Ecto data layer, LiveView real-time patterns, PubSub/Presence, testing, performance, and deployment with releases.
novae-user-journey-driven-development
Run the NOVAE loop (Sequential Thinking → Context7 QA → Parallel Tasks → Integration → Tests) for React/TypeScript + Express projects like ProAgentic. Use for features, bug fixes, or refactors that must be validated end-to-end. Prioritize user flows, Playwright MCP, and safety (never kill processes).
implement-test-handler
Implements Z-Wave CTT (Certification Test Tool) test handlers for automating certification tests. Use when asked to create handlers for a given test, which includes automating CTT log parsing and prompt responses.
code-review-checklist
Systematic code review using quality gates, SOLID principles, error handling patterns, and test coverage analysis. Provides structured feedback with severity levels and actionable improvements.
code-audit
全面审查代码质量、架构设计和开发规范。检查 Next.js/Server Actions 最佳实践、代码重复、逻辑清晰度、文档完整性、第三方库更新状态、低效方法。用于代码审查、质量提升、重构规划、新人上手理解代码。