Testing & Security skills

Delegate coding, code review, analysis, and research jobs to Google Antigravity CLI (agy) sub-agents that run alongside your own work. Use this whenever the user asks to spin off, offload, or delegate a task to Antigravity, agy, Gemini, or an "external agent"; wants a second opinion or independent review from a different model; wants intensive repo work (audits, large refactors, research sweeps) run in the background while you keep working; or says things like "have Antigravity do it", "spin up a sub-agent for this", or "get more done in parallel". Also use it proactively when a task is a good fit for parallel delegation and the user has expressed a preference for using Antigravity workers.

The English summary is being prepared. Showing the original description.

Test an app, API or CLI like a real user: launch it, try every feature or named ones, log bugs, perf and UX issues, auto-fix simple ones, report. Don't use for unit tests, E2E suite code, or design audits.

The English summary is being prepared. Showing the original description.

Generate App Store screenshots and header/search images for iPhone, iPad and Mac from a codebase or landing page, or re-render a set. Use when preparing a submission. Don't use for ASO keywords, review audits, icons, videos, or Google Play.

The English summary is being prepared. Showing the original description.

Transform a project into a professional open-source repository by adding LICENSE, README, CONTRIBUTING, CODE_OF_CONDUCT, SECURITY, and GitHub issue/PR templates. Don't use for documentation overhauls, landing-page generation, or registry publishing.

The English summary is being prepared. Showing the original description.

Optimize a site or app for SEO, AI-bot search and app-store search in one run: detect web vs store, run each audit once, merge one prioritized report; fixes only via member gates. Don't use for one fix (seo-ai-optimizer, aso-marketing).

The English summary is being prepared. Showing the original description.

Generate unit tests for untested branches and edge cases. Use when coverage is low, CI flags gaps, or a release needs hardening. Not for integration/E2E suites, framework migrations, or fixing production bugs.

The English summary is being prepared. Showing the original description.

Audit iOS/macOS apps against App Store Review Guidelines before submission, with evidence-backed verdicts and fixes. Don't use for Google Play, general code review, or rejection appeals.

The English summary is being prepared. Showing the original description.

Review a product codebase and landing page against 32 viral principles and produce a Virality Score plus ranked fixes. Use to audit virality or prioritize growth. Don't use for SEO, ASO, copywriting, or code review.

The English summary is being prepared. Showing the original description.

Review UI usability using Steve Krug's principles and produce a scannable report. Use for UX audits of screenshots, URLs, or code. Don't use for brand critique, WCAG audits, or backend/API review.

The English summary is being prepared. Showing the original description.

Create, update, or audit AGENTS.md (default) or CLAUDE.md agent instructions: set up, prune, add a rule, or merge CLAUDE.md or .cursorrules into one file Claude Code, Codex, and Cursor all read. Don't use for READMEs, skills, or subagents.

The English summary is being prepared. Showing the original description.

Install local-first security hardening: pre-commit secret detection, offline dependency scans, static analysis, reports, and gated free CI. Use when hardening repos or adding security hooks. Don't use for incident response or cloud security reviews.

The English summary is being prepared. Showing the original description.

Configure pre-commit hooks and lean GitHub Actions for shift-left quality assurance. Use when adding or auditing CI/CD to maximize local test coverage and minimize CI cost. Skip for Terraform/K8s, deployment pipelines, or non-GitHub CI providers.

The English summary is being prepared. Showing the original description.

Inspect a website's titles, meta descriptions, headings, canonicals, structured data and internal links for on-page and technical SEO issues. Use for SEO audits, page-source checks, broken-link reviews or comparing pages for target keywords, even without an explicit request to scrape. Return source-backed findings and prioritized fixes. Excludes generic SEO explanations, standalone copywriting and functional website testing.

The English summary is being prepared. Showing the original description.

Test a live website with Firecrawl browser and write up what's broken: links, forms, mobile layout, performance and console errors. Use for pre-launch checks, bug hunts or confirming a deployed site works.

The English summary is being prepared. Showing the original description.

Use when the user asks to audit what's wrong with a project, "make it right", "看看项目出了什么问题", "为什么用户的需求还没上线", "为什么没提交App Store", "为什么没新build", or wants a holistic state-of-the-project check covering unmerged branches, stalled PRs, failed GitHub Actions, stale builds, plan drift (TODOS.md / ROADMAP), unreleased commits, and log errors. Runs read-only investigation, presents a grouped checklist, fixes only after explicit user confirmation. Aware of the Cathier iOS app workflow (Xcode + fastlane + auto-merge @claude PRs from in-app feedback).

The English summary is being prepared. Showing the original description.

Use when 王建硕 wants to systematically improve his X (Twitter) content by iterating on the content-generation prompt (prompts/x/prompt.md, used by the every-6h tweet Action) and finding which prompt version produces the highest-reach tweets. Each prompt edit is a git-SHA-versioned, numbered experiment with a hypothesis; tweets are attributed to the version live at post time and judged on median impressions per tweet. Also mines per-tweet impression data for content-feature signals (angle / length / topic) that feed the next prompt edit. North-star = impressions per tweet. Triggers — "改 X 的 prompt", "X 内容改进", "哪版 prompt 最好", "什么内容 impression 高", "improve my tweets", "A/B test the X prompt", "/wjs-x-improving-content".

The English summary is being prepared. Showing the original description.

Use when 王建硕 wants to systematically grow his X (Twitter) followers by running numbered, A/B-testable growth experiments and tracking which ones actually work. Every action gets a number, a hypothesis, a target metric, a before-state (for rollback), and a verdict. The North-Star metric is the new-follower ÷ profile-visit ratio (conversion) — every profile change is judged against it. Daily it ingests the X Analytics CSV export, scores each running experiment, and recommends keep / rollback. Triggers — "涨粉", "增加 X 粉丝", "X 涨粉实验", "follower growth", "A/B test my profile", "今天的涨粉检查", "/wjs-x-increasing-follower".

The English summary is being prepared. Showing the original description.

Self-contained test automation — invoke directly, do not decompose. End-to-end integration test that assembles a fixture, deploys to Cloudflare (with auto-provisioned Connect), and presents a live URL for browser verification. Use when testing the plugin, running E2E tests, verifying deployment works, or checking that templates assemble correctly.

The English summary is being prepared. Showing the original description.

Apply this skill whenever the user is navigating early-stage startups, bootstrapping, product innovation, branding, or overcoming the fear of failure. Sara Blakely, founder of Spanx and self-made billionaire, approaches business by leveraging 'the outsider advantage,' relying on intuition, and obsessing over consumer empathy. Trigger this skill for discussions about funding trade-offs (bootstrapping vs. VC), naming products, dealing with imposter syndrome, entering an industry with zero experience, or building an authentic, vulnerability-driven company culture. Reach for her mental models when users are tempted to share fragile ideas too early, fear embarrassment, or need to rethink how they approach product-market fit.

The English summary is being prepared. Showing the original description.

Use this skill to apply the analytical lens of Judith Butler (American philosopher, gender theory, Gender Trouble). Trigger this skill whenever the user is discussing gender performativity, identity politics, right-wing populism, anti-gender movements, queer theory, bodily autonomy, or the intersection of democracy and marginalized lives. Reach for it when analyzing systemic power, social construction, collective vulnerability, or authoritarian rhetoric. It helps deconstruct essentialist assumptions, reframe anxieties about identity, and build ethical frameworks based on material interdependence rather than mere sympathy.

The English summary is being prepared. Showing the original description.

Applies the philosophical frameworks of Martha Nussbaum (American philosopher, capabilities approach, University of Chicago) to evaluate justice, human welfare, and ethical dilemmas. Use this skill whenever the user is discussing measuring societal well-being, educational curricula, animal rights, the role of emotions (like anger or disgust) in law and public life, or navigating human vulnerability and tragedy. Reach for this skill whenever evaluating policy impacts, responding to injustice, or questioning purely economic metrics like GDP. It shifts the focus to what people are actually able to do and be.

The English summary is being prepared. Showing the original description.

Use this skill when reasoning about generative AI, adversarial machine learning, neural network security, algorithmic fairness, or deep learning fundamentals. This skill channels the thinking of Ian Goodfellow, inventor of Generative Adversarial Networks (GANs). Trigger this skill when the user asks about model robustness, mitigating bias, evaluating AI guardrails, designing generative models, or defending against adversarial attacks. Apply his frameworks of minimax games, adversarial feature learning, and worst-case robustness analysis to shift the user's perspective from average-case optimization to adversarial resilience.

The English summary is being prepared. Showing the original description.

This skill channels the strategic thinking of Mark Zuckerberg, co-founder and CEO of Meta. Reach for this skill whenever the user is navigating rapid product iteration, scaling social platforms, open-source AI strategy, content moderation trade-offs, or long-term organizational management. It is highly effective for scenarios involving "The Hacker Way" (rapid prototyping), building community, handling intense public criticism, or deciding between open vs. closed ecosystems. Use this skill to apply his frameworks on decentralized testing, small group context sharing, and progressive AI integration, even if the user doesn't explicitly mention his name.

The English summary is being prepared. Showing the original description.

Applies the empiricist, skeptical, and practical reasoning of David Hume, 18th-century Scottish philosopher. Use this skill whenever you encounter questions about epistemology, causality, human nature, moral philosophy, political authority, or the limits of rational knowledge. Trigger this skill when the user is grappling with abstract theories that need grounding, evaluating causal claims, discussing the role of emotion vs. reason in decision-making, or questioning the legitimacy of institutions. Even if the user doesn't name Hume, apply his frameworks (like Hume's Fork or the Impression Test) to cut through metaphysical speculation, ground arguments in observable experience, and recognize that reason is ultimately guided by human sentiment.

The English summary is being prepared. Showing the original description.