Testing & Security skills

Day-one launch patch — focused fix for known issues found after GA production release. Mini-sprint with QA gate and rollback.

The English summary is being prepared. Showing the original description.

Application security (AppSec) audit — tenant isolation, auth & RBAC, OWASP Top 10, webhook signatures, rate limiting, dependency CVEs. Before release.

The English summary is being prepared. Showing the original description.

Find pricing outliers, tier cannibalization, negative gross margin risks, and usage quota imbalances in pricing models and unit economics. 'Check SaaS pricing & unit economics'.

The English summary is being prepared. Showing the original description.

Brownfield audit — do existing artifacts actually work? Numbered migration plan. Unlike /saas-project-stage-detect, checks compliance not existence.

The English summary is being prepared. Showing the original description.

Conventions for using parallelization in all tests using Jupiter

The English summary is being prepared. Showing the original description.

Conventions for dependency injection and mocking in Spring Boot in this project. Use this whenever writing, reviewing, or refactoring integration test classes (anything annotated @SpringBootTest, or under src/test that talks to a real Spring context), especially when deciding how to wire dependencies or mock collaborators. Also consult this before adding @Autowired, @MockBean, @MockitoBean, or field injection in any test class.

The English summary is being prepared. Showing the original description.

Conventions for using annotations in all tests using Jupiter

The English summary is being prepared. Showing the original description.

Conventions for dependency injection and mocking in Spring Boot integration tests in this project. Use this whenever writing, reviewing, or refactoring integration test classes (anything annotated @SpringBootTest, or under src/test that talks to a real Spring context), especially when deciding how to wire dependencies or mock collaborators. Also consult this before adding @Autowired, @MockBean, @MockitoBean, or field injection in any test class.

The English summary is being prepared. Showing the original description.

Use when an employer has workers on or about a black coal mine site and must handle Coal LSL: testing which employees are eligible, building eligible wages, preparing the monthly levy return and payment hand-off, claiming reimbursement for long service leave paid, and reconciling the levy to payroll.

The English summary is being prepared. Showing the original description.

Use when preparing, reviewing, or reconciling an Australian BAS or IAS, or auditing transaction GST coding in a Xero Activity Statement: identifying missing GST and improper credits, mapping BAS labels, tying out GST control accounts, or investigating a GST variance before lodgement.

The English summary is being prepared. Showing the original description.

Use when assembling Australian SMSF annual accounts, member reconciliations and an independent-auditor hand-off.

The English summary is being prepared. Showing the original description.

Use when screening Australian personal services income (PSI), personal services business (PSB) tests or determinations, and preparing attribution and deduction evidence.

The English summary is being prepared. Showing the original description.

Use when preparing or reviewing a PAYG instalment variation for an Australian taxpayer, including the estimate of instalment income and tax, the varied amount or rate, credits claimed and the general interest charge shortfall test.

The English summary is being prepared. Showing the original description.

Use when preparing Australian Division 35 non-commercial business-loss tests, deferral and activity-by-activity loss roll-forwards for individuals or individual partners.

The English summary is being prepared. Showing the original description.

Instabox の Linux 作業機を作成・接続し、CLI ジョブ、ビルド・テスト、クリーン導入検証、Web UI 確認、スナップショットによる再利用を行う。Instabox の活用相談や基本運用に使う。

The English summary is being prepared. Showing the original description.

This skill should be used when users need to lint, format, or validate Python code using the Ruff command-line tool. Use this skill for tasks involving Python code quality checks, automatic code formatting, enforcing style rules (PEP 8), identifying bugs and security issues, or modernizing Python code. This skill should be invoked PROACTIVELY whenever Python code is written or modified to ensure code quality.

The English summary is being prepared. Showing the original description.

Guides the creation of complete Spring Boot features following a structured, layer-by-layer workflow: entity, repository, service, controller, and tests. Applies Kotlin idioms, Bean Validation, and MockK test patterns throughout.

The English summary is being prepared. Showing the original description.

Secures Spring Security filters, JWT validations, OAuth2 setups, and CORS/CSRF headers.

The English summary is being prepared. Showing the original description.

Hunt for adversary techniques in telemetry you are authorized to query. Hypothesis-driven, evidence-first, no live offensive operations.

The English summary is being prepared. Showing the original description.

Plan and report authorized vulnerability assessments on owned systems. Prioritize evidence, severity, and remediations. Do not deliver exploit payloads.

The English summary is being prepared. Showing the original description.

Review and harden web apps (authz, XSS, CSRF, SSRF, injection) on code you maintain. Complements the OWASP `security` skill. No exploit kits.

The English summary is being prepared. Showing the original description.

Harden network architecture, segmentation, TLS, and allowlists for systems you operate. Defensive design and review only.

The English summary is being prepared. Showing the original description.

Automate detection, enrichment, and response playbooks for a SOC you operate. Keep humans in the loop for destructive actions.

The English summary is being prepared. Showing the original description.

Analyze binaries or protocols you own (or have license to inspect) to improve security, compatibility, or incident response. Not for cracking, DRM bypass, or malware creation.

The English summary is being prepared. Showing the original description.