Testing & Security skills

Track and report progress of a request to create and run an EcoSIM case for a site ("create an ecosim run for site US-UMB", "set up and run EcoSIM at <site>"). Records four stages — data preparation, namelist creation, model simulation, and output evaluation — in result/<SITE_ID>/progress.json and PROGRESS.md, derives step status from files and quality reports on disk, and records manual results such as the executable, test run, and evaluation verdicts. Use at the start of such a request, after each stage, and whenever the user asks where a site run stands.

The English summary is being prepared. Showing the original description.

Verification loop for Spring Boot projects: build, static analysis, tests with coverage, security scans, and diff review before release or PR.

The English summary is being prepared. Showing the original description.

Spring Security best practices for authn/authz, validation, CSRF, secrets, headers, rate limiting, and dependency security in Java Spring Boot services.

The English summary is being prepared. Showing the original description.

Provides comprehensive testing patterns for Spring Boot applications covering unit, integration, slice, and container-based testing with JUnit 5, Mockito, Testcontainers, and performance optimization. Use when writing tests, @Test methods, @MockBean mocks, or implementing test suites for Spring Boot applications.

The English summary is being prepared. Showing the original description.

Provides JWT authentication and authorization patterns for Spring Boot 3.5.x covering token generation with JJWT, Bearer/cookie authentication, database/OAuth2 integration, and RBAC/permission-based access control using Spring Security 6.x. Use when implementing authentication or authorization in Spring Boot applications.

The English summary is being prepared. Showing the original description.

Generate a structured test plan for a feature or module — covers unit, integration, contract, and edge cases without writing implementation code.

The English summary is being prepared. Showing the original description.

Run the authorized defensive security workflow — domain security-* skills, authorization gate, risk-based routing, hardening, and review.

The English summary is being prepared. Showing the original description.

Generates Spring Boot 3.x configurations, creates REST controllers, implements Spring Security 6 authentication flows, sets up Spring Data JPA repositories, and configures reactive WebFlux endpoints. Use when building Spring Boot 3.x applications, microservices, or reactive Java applications; invoke for Spring Data JPA, Spring Security 6, WebFlux, Spring Cloud integration, Java REST API design, or Microservices Java architecture.

The English summary is being prepared. Showing the original description.

JPA/Hibernate patterns for entity design, relationships, query optimization, transactions, auditing, indexing, pagination, and pooling in Spring Boot.

The English summary is being prepared. Showing the original description.

Use when implementing authentication, authorization, JWT tokens, security filters, password encoding, or any Spring Security configuration. Covers stateless JWT auth, token rotation, RBAC, and method-level security.

The English summary is being prepared. Showing the original description.

Run the bug fix workflow — risk-based routing through task validation, implementation, testing, and optional review.

The English summary is being prepared. Showing the original description.

Audita calidad de código Kotlin/Spring Boot en este proyecto. Úsalo cuando el usuario pida revisar código, verificar estándares, hacer un code review, auditar calidad, ejecutar linters, verificar cobertura, o antes de hacer commit/PR. También úsalo cuando mencionen KTLint, Detekt, JaCoCo, cobertura, o simplemente digan "revisa el código" / "está listo para commit" / "qué tan bueno está el código".

The English summary is being prepared. Showing the original description.

Spec-locked TDD with a mutation-testing gate — refine the intent into an immutable Gherkin contract (SHA-256 frozen), implement under the three laws of TDD, pass a judge audit, and merge only if every mutant dies.

The English summary is being prepared. Showing the original description.

Run the full feature workflow — task validation, technical design, implementation, testing, review, and documentation.

The English summary is being prepared. Showing the original description.

Configura cobertura de tests y CI pipeline

The English summary is being prepared. Showing the original description.

Run the PageSpeed performance audit — 80/20 analysis of Core Web Vitals using the PageSpeed Insights API.

The English summary is being prepared. Showing the original description.

Provides expert knowledge for implementing and reviewing application security following OWASP Top 10 (2021), with stack-specific patterns for Spring Boot, Django, Next.js, and Astro.

The English summary is being prepared. Showing the original description.

Generate a structured test plan for a feature or module — covers unit, integration, contract, and edge cases without writing any implementation code.

The English summary is being prepared. Showing the original description.

Use when writing tests of any kind — unit, slice, or integration. Covers test structure, naming conventions, Mockito patterns, @WebMvcTest, @DataJpaTest, and Testcontainers setup.

The English summary is being prepared. Showing the original description.

Run the database migration workflow for schema/data changes, operational sequencing, tests, and review.

The English summary is being prepared. Showing the original description.

Guides agents through Red-Green-Refactor with runner-captured evidence. Use when running /cc-tdd-cycle, writing tests before implementation, or Global TDD required is yes.

The English summary is being prepared. Showing the original description.

Run a structured Red-Green-Refactor TDD cycle — write a failing test first, implement the minimum code to pass it, then refactor with the suite green.

The English summary is being prepared. Showing the original description.

t-wada式TDD（テスト駆動開発）でRED→GREEN→REFACTORサイクルを使ってテストファーストで開発を進めるスキル。 ユーザーが「TDDで実装して」「テストファーストで」「t-wada式で」「REDから始めて」「失敗するテストを先に」と言った場合は必ずこのスキルを使うこと。 FizzBuzz、スタック、認証、バリデーションなど、あらゆる実装タスクにTDDアプローチを適用できる。 ユーザーが実装を始めようとしているときは積極的にTDDを提案すること。

The English summary is being prepared. Showing the original description.

任意のタスク（GitHub Issue・自由記述リクエスト・口頭要件）を起点に、受け入れ条件確認・スコープ定義・影響分析・テスト戦略を含む実装計画（15セクション）と、builder エージェントへ渡す features.json を生成します。「〇〇を作って」「実装計画を作って」「Issue

The English summary is being prepared. Showing the original description.