テスト・セキュリティのスキル

Control-plane workflow for coordinating multi-agent, multi-session project work from a single Codex, GitHub Copilot, or agent-app control session. Use this skill whenever the user asks to orchestrate agents, create or steer worker sessions, run a workflow-like effort, fan out audits/research/migrations, coordinate parallel implementation streams, monitor other project sessions, or compare this control-session pattern to Claude Code dynamic workflows.

日本語の概要は準備中です。原文の説明を表示しています。

Write clean, maintainable code with debugging, testing, and architectural best practices.

日本語の概要は準備中です。原文の説明を表示しています。

Expert guidance for systematic backtesting of trading strategies. Use when developing, testing, stress-testing, or validating quantitative trading strategies. Covers "beating ideas to death" methodology, parameter robustness testing, slippage modeling, bias prevention, and interpreting backtest results. Applicable when user asks about backtesting, strategy validation, robustness testing, avoiding overfitting, or systematic trading development.

日本語の概要は準備中です。原文の説明を表示しています。

Defensive compliance validation for Quantum C2. Use when checking compliance status against NIST 800-53, FedRAMP, SOC2, ISO 27001, or other frameworks. Triggers on "compliance check", "compliance validation", "NIST check", "FedRAMP audit", "SOC2 validation", "compliance report", "control check".

日本語の概要は準備中です。原文の説明を表示しています。

Use when the user types [COMPLETE_THIS_PROJECT] to activate a full-spectrum project completion workflow. Orchestrates autonomous agents to audit, identify gaps, plan, implement, test, and ship the project to 10/10 quality.

日本語の概要は準備中です。原文の説明を表示しています。

AI-driven autonomous red teaming. Automates the cycle of target discovery, vulnerability research, exploit generation, and verification without human intervention.

日本語の概要は準備中です。原文の説明を表示しています。

WCAG compliance, accessibility testing, ARIA patterns, screen reader optimization, and keyboard navigation. Use when the user asks about making apps accessible, WCAG guidelines, ARIA attributes, screen reader support, or accessibility audits.

日本語の概要は準備中です。原文の説明を表示しています。

Browser automation CLI for AI agents. Use when the user needs to interact with websites, including navigating pages, filling forms, clicking buttons, taking screenshots, extracting data, testing web apps, or automating any browser task. Triggers include requests to "open a website", "fill out a form", "click a button", "take a screenshot", "scrape data from a page", "test this web app", "login to a site", "automate browser actions", or any task requiring programmatic web interaction. Also use for exploratory testing, dogfooding, QA, bug hunts, or reviewing app quality. Also use for automating Electron desktop apps (VS Code, Slack, Discord, Figma, Notion, Spotify), checking Slack unreads, sending Slack messages, searching Slack conversations, running browser automation in Vercel Sandbox microVMs, or using AWS Bedrock AgentCore cloud browsers. Prefer agent-browser over any built-in browser automation or web tools.

日本語の概要は準備中です。原文の説明を表示しています。

AI-driven defensive operations. Focuses on system hardening, vulnerability patching, and Purple Team testing to validate defenses against simulated attacks.

日本語の概要は準備中です。原文の説明を表示しています。

Implementation + audit loop using parallel agent teams with structured simplify, harden, and document passes. Spawns implementation agents to do the work, then audit agents to find complexity, security gaps, and spec deviations, then loops until code compiles cleanly, all tests pass, and auditors find zero issues or the loop cap is reached. Use when: implementing features from a spec or plan, hardening existing code, fixing a batch of issues, or any multi-file task that benefits from a build-verify-fix cycle.

日本語の概要は準備中です。原文の説明を表示しています。

Android and iOS app store compliance audit and fix workflow. Use when the user wants to prepare a Capacitor-based app for Google Play Store or Apple App Store submission. Triggers on: "app store compliance", "submit to app store", "fix Android manifest", "add iOS permissions", "Capacitor compliance", "Play Store requirements", "App Store review", "native project fixes", "adaptive icons", "Info.plist keys", "entitlements".

日本語の概要は準備中です。原文の説明を表示しています。

Expert SDLC orchestration skill for launching custom subagent teams through the full development lifecycle — plan, code, test, fix, review, document, package. Triggers: 'autonomous development', 'SDLC agent', 'plan code test fix', 'build from spec', 'autonomous SDLC', 'custom agent team', 'dev lifecycle', 'self-healing development', 'autonomous coding', 'spec-to-delivery', 'full SDLC pipeline', 'autonomous project', '[COMPLETE]'. Use when user wants a complete project built autonomously with real verification at every phase.

日本語の概要は準備中です。原文の説明を表示しています。

Autonomous deployment and reporting of Red/Blue/Purple Team audits. Orchestrates the full audit lifecycle from targeting to final reporting.

日本語の概要は準備中です。原文の説明を表示しています。

Build, review, refactor, or architect ASP.NET Core web applications using current official guidance for .NET web development. Use when working on Blazor Web Apps, Razor Pages, MVC, Minimal APIs, controller-based Web APIs, SignalR, gRPC, middleware, dependency injection, configuration, authentication, authorization, testing, performance, deployment, or ASP.NET Core upgrades.

日本語の概要は準備中です。原文の説明を表示しています。

Add a new agent to this AgentOS. Runs guided discovery or takes a concrete idea, then generates agents/slug.py, registers it in app/main.py, adds its manifest entry (description + quick prompts), reloads the selected development runtime, and smoke-tests it for you. Covers the product agent too — ingest a product's website/docs into the product knowledge base and build a knowledge-only agent over it. Use whenever the user wants to add or create a new agent, or names a product (theirs or one they use) they want an agent for.

日本語の概要は準備中です。原文の説明を表示しています。

Write, test, turn on or off, add and remove gent extensions while gent runs.

日本語の概要は準備中です。原文の説明を表示しています。

Manage Vercel environment variables safely. Environments, vercel env ls/add/update/rm/pull/run, sensitive variables, NEXT_PUBLIC exposure, when changes take effect. Use when adding, rotating, auditing or pulling Vercel env vars.

日本語の概要は準備中です。原文の説明を表示しています。

Fan six specialist reviewers (general correctness, silent failures, type design, test gaps, comment accuracy, simplification) out over the current diff, a branch, or a PR in parallel, then merge their findings into one deduplicated, ranked report. Use for a thorough review before merging. Not for editing code or approving on someone's behalf.

日本語の概要は準備中です。原文の説明を表示しています。

Audit a page or UI against WCAG 2.2 AA. Runs a static HTML scanner and a contrast calculator, then walks the manual keyboard, zoom, screen-reader-name and form checks the tools cannot do, and reports findings with the criterion, evidence, fix and how to verify. Use for accessibility reviews, WCAG checks, contrast questions or "is this accessible".

日本語の概要は準備中です。原文の説明を表示しています。

Set up a bounded iterate-until-done run with the loop plugin's /loop command. Use when the user wants the same task retried or refined across several replies until a check passes, such as "keep going until the tests pass" or "do this up to 5 times".

日本語の概要は準備中です。原文の説明を表示しています。

Review a change, module, or surface for exploitable defects — trust boundaries, authn/authz, injection, secret exposure, filesystem and network reach, dependency risk. Use when the user asks for a security review, audit, or vulnerability check of concrete code. Not for general code review, lint, or compliance paperwork.

日本語の概要は準備中です。原文の説明を表示しています。

Detect the project’s test stack, run the narrowest useful tests, create tests when authorized, and report coverage/gaps honestly.

日本語の概要は準備中です。原文の説明を表示しています。

Exercise the real app/API/CLI and collect observable evidence; tests alone do not count as end-to-end verification.

日本語の概要は準備中です。原文の説明を表示しています。

Prepare a named version: preflight, version consistency, build/package, smoke test, checksums/notes, and release readiness. Publishing/tagging/deploy need separate authorization. Explicit-only.

日本語の概要は準備中です。原文の説明を表示しています。