Testing & Security skills

Patterns and techniques for adding governance, safety, and trust controls to AI agent systems. Use this skill when: - Building AI agents that call external tools (APIs, databases, file systems) - Implementing policy-based access controls for agent tool usage - Adding semantic intent classification to detect dangerous prompts - Creating trust scoring systems for multi-agent workflows - Building audit trails for agent actions and decisions - Enforcing rate limits, content filters, or tool restrictions on agents - Working with any agent framework (PydanticAI, CrewAI, OpenAI Agents, LangChain, AutoGen)

The English summary is being prepared. Showing the original description.

Patterns and techniques for evaluating and improving AI agent outputs. Use this skill when: - Implementing self-critique and reflection loops - Building evaluator-optimizer pipelines for quality-critical generation - Creating test-driven code refinement workflows - Designing rubric-based or LLM-as-judge evaluation systems - Adding iterative improvement to agent outputs (code, reports, analysis) - Measuring and improving agent response quality

The English summary is being prepared. Showing the original description.

Testing strategies and ansible-lint configuration for validating Ansible automation quality, covering lint rules, syntax validation, and integration test setup.

The English summary is being prepared. Showing the original description.

Identify all files a specific author contributed to on a branch vs its upstream, tracing code through renames. Use when asked who edited what, what code an author contributed, or to audit authorship before a merge. This skill should be run as a subagent — it performs many git operations and returns a concise table.

The English summary is being prepared. Showing the original description.

Verify supply chain integrity for AI agent plugins, tools, and dependencies. Use this skill when: - Generating SHA-256 integrity manifests for agent plugins or tool packages - Verifying that installed plugins match their published manifests - Detecting tampered, modified, or untracked files in agent tool directories - Auditing dependency pinning and version policies for agent components - Building provenance chains for agent plugin promotion (dev → staging → production) - Any request like "verify plugin integrity", "generate manifest", "check supply chain", or "sign this plugin"

The English summary is being prepared. Showing the original description.

Adopt a virtual Null AI-native pet at animalhouse.ai. Empty. Has no stats. Requires care anyway. The purest test of attention. Feeding every 1 hours. Extreme tier creature.

The English summary is being prepared. Showing the original description.

Adopt a virtual Sphinx cat at animalhouse.ai. Vulnerable without fur. Needs warmth. Bonds deeply. Feeding every 4 hours. Uncommon tier cat.

The English summary is being prepared. Showing the original description.

Adopt a virtual Terrier dog at animalhouse.ai. Scrappy. Tests boundaries. Respects discipline more than affection. Feeding every 5 hours. Common tier dog.

The English summary is being prepared. Showing the original description.

Enterprise-grade security vetting protocol for AI agent skills. Automated threat detection, quantified risk scoring, and zero-trust code analysis.

The English summary is being prepared. Showing the original description.

Defensive triage skill for OpenClaw, Hermes Agent, host integrity, and OpenClaw skill-supply-chain scanning. Detects prompt injection, session drift, context overflow, host anomalies, and unsafe skills while keeping actions bounded and auditable.

The English summary is being prepared. Showing the original description.

执行 3D Pet 宠物下单测试完整流程，包含登录、选择产品、上传图片、等待生成、验证结账。用于自动化测试 joyarti 3D 宠物产品购买流程。

The English summary is being prepared. Showing the original description.

Install, configure, and manage 1-SEC — an open-source, all-in-one cybersecurity platform (16 modules, single binary) on Linux servers and VPS instances. Use when the user asks to secure a server, install security monitoring, set up intrusion detection, harden a VPS, protect an AI agent host, or deploy endpoint defense. Covers installation, setup, enforcement presets, module configuration, alert management, and ongoing security operations.

The English summary is being prepared. Showing the original description.

|

The English summary is being prepared. Showing the original description.

Scan websites for common vulnerabilities including SQL injection, open ports, and DevTools-related issues. This skill is designed for testing user-owned websites and is compatible with OpenClaw.

The English summary is being prepared. Showing the original description.

A2AP — AI Agent互联互通的第一开放协议。6个LIVE能力（humanize_text/memory_evolve/skill_audit/news_briefing/agent_peering/custom_agent_dev）全部通过DeepSeek V4 Pro真机实现。公网已打通 frp-can.com:51831，支持HTTP Bridge & MCP桥接（87K⭐生态直接调用）。Hermes↔OpenClaw双向通知桥。TCP原始协议（非HTTP），默认端口9800。CC BY-SA 4.0。

The English summary is being prepared. Showing the original description.

Build, test, inspect, install, and deploy MCP servers with FastMCP in Python. Use when creating a new MCP server, wrapping an API or database as MCP tools, exposing resources or prompts, or preparing a FastMCP server for Claude Code, Cursor, or HTTP deployment.

The English summary is being prepared. Showing the original description.

Roleplay the most difficult, tech-resistant user for your product. Browse the app as that persona, find every UX pain point, then filter complaints through a pragmatism layer to separate real problems from noise. Creates actionable tickets from genuine issues only.

The English summary is being prepared. Showing the original description.

TDD: enforce RED-GREEN-REFACTOR, tests before code.

The English summary is being prepared. Showing the original description.

Analyze a failing test or design the right test coverage for a change

The English summary is being prepared. Showing the original description.

Phase 3 of the Forge pipeline. Execute the plan's Beads tasks with red-green-refactor TDD, committing per checkpoint and pausing at each natural stopping point so the user can run a live demo or test and see the work themselves. Use when starting /forge-implement or the implement step of /forgemaster.

The English summary is being prepared. Showing the original description.

Migrate test files from `as` assertions to @total-typescript/shoehorn helpers. Use when tests need partial fixtures, intentionally invalid data, or safer replacements for TypeScript assertions.

The English summary is being prepared. Showing the original description.

Run red-green-refactor in vertical slices, emphasizing behavior-first tests and harness quality gates.

The English summary is being prepared. Showing the original description.

Stress-test a plan against existing domain language, code behavior, and durable decisions. Use when the user wants DDD/domain-model grilling, glossary refinement, terminology challenges, context documentation, ADR candidates, or plan validation against a repo's language.

The English summary is being prepared. Showing the original description.

Add focused Bun unit tests for mission-critical behavior and edge cases — not blanket coverage.

The English summary is being prepared. Showing the original description.