Skip to content
cccskills

Testing & Security skills

Test design, vulnerability assessment, and quality assurance (13K skills)

Filter by price or sort order

golang-testing

FreeSummary

Plan and write Go tests using test-driven development, table-driven cases, subtests, mocks, and HTTP or database test patterns. The guidance also covers benchmarks, fuzzing, race detection, and coverage so you can check behavior and performance across a Go project.

  • Starting a Go feature with a failing test
  • Adding table-driven tests for edge cases
  • Testing HTTP handlers or database code
xu-xiang/everything-claude-code-zh2KUpdated Mar 5, 2026

Use this skill to check a Spring Boot project before a pull request, release, or deployment. It guides builds, static analysis, tests with coverage, security scans, and diff review, then organizes the results into a verification report.

  • Checking a Spring Boot change before a pull request
  • Reviewing test coverage and static analysis results
  • Scanning dependencies for known vulnerabilities
xu-xiang/everything-claude-code-zh2KUpdated Mar 5, 2026

django-security

FreeSummary

Use this guide when building or reviewing Django application security. It covers authentication and permissions, protection against CSRF, SQL injection, and XSS, plus production settings for HTTPS, cookies, uploads, APIs, secrets, and security logging.

  • Reviewing security settings before production deployment
  • Adding user roles and permission checks
  • Checking protection against common web attacks
xu-xiang/everything-claude-code-zh2KUpdated Mar 5, 2026

Review a Django project before a pull request or deployment with a structured verification checklist. It covers environment and configuration, migrations, code quality, tests and coverage, security scans, static assets, performance, and a final diff review, then organizes findings into a report.

  • Checking a Django change before opening a pull request
  • Reviewing migrations and test coverage before release
  • Preparing a Django app for deployment
xu-xiang/everything-claude-code-zh2KUpdated Mar 5, 2026

security-review

FreeSummary

Review code that handles authentication, user input, secrets, API endpoints, payments, or sensitive data. The skill provides security checklists and implementation patterns covering validation, access control, injection, cross-site scripting, rate limits, logging, dependencies, and deployment readiness.

  • Checking input validation and file upload handling
  • Reviewing authentication and authorization code
  • Preparing API endpoints for production deployment
xu-xiang/everything-claude-code-zh2KUpdated Mar 5, 2026

tdd-workflow

FreeSummary

Use this skill to guide feature work, bug fixes, and refactoring with a test-first workflow. It helps define user journeys, add unit, integration, and end-to-end tests, implement code against them, and check for at least 80% coverage.

  • Adding tests before implementing a new feature
  • Planning coverage for a bug fix
  • Testing API endpoints and user flows
xu-xiang/everything-claude-code-zh2KUpdated Mar 5, 2026

eval-harness

FreeSummary

Define expected behavior before changing a Claude Code project, then track capability checks and regression results as work progresses. The skill provides evaluation reports and pass@k reliability measures to show whether new behavior works and existing behavior remains intact.

  • Set success criteria before implementing a feature
  • Check whether existing behavior regressed after a change
  • Summarize evaluation results before review
xu-xiang/everything-claude-code-zh2KUpdated Mar 5, 2026

security-scan

FreeSummary

Use this skill to audit Claude Code configuration with AgentShield. It checks project instructions, settings, MCP servers, hooks, and agent definitions for exposed secrets, risky permissions, command injection, and other configuration concerns, with reports and optional safe fixes.

  • Auditing a new Claude Code project configuration
  • Checking settings after changing MCP or hooks
  • Reviewing configuration before committing changes
xu-xiang/everything-claude-code-zh2KUpdated Mar 5, 2026

springboot-tdd

FreeSummary

Apply test-driven development to Spring Boot services: write failing tests first, implement the smallest change, then refactor while keeping tests green. Use JUnit 5, Mockito, MockMvc, Testcontainers, and JaCoCo to cover unit, web, integration, and persistence behavior.

  • Adding a Spring Boot feature or endpoint
  • Fixing a bug with a regression test
  • Refactoring while keeping tests green
xu-xiang/everything-claude-code-zh2KUpdated Mar 5, 2026

django-tdd

FreeSummary

Build a test suite for Django applications using pytest-django and the red-green-refactor workflow. This skill covers model, view, serializer, and Django REST Framework API tests, with factories for test data, mocks for external services, fixtures, and coverage reports.

  • Writing tests for Django models and views
  • Testing Django REST Framework endpoints
  • Creating repeatable test data with factories
xu-xiang/everything-claude-code-zh2KUpdated Mar 5, 2026

cpp-testing

FreeSummary

Use this skill to write, update, and debug C++ tests with GoogleTest, GoogleMock, CMake, and CTest. It covers test structure, stable execution, coverage settings, and sanitizers, tools that help detect memory errors, undefined behavior, and data races.

  • Writing or repairing C++ unit and integration tests
  • Configuring GoogleTest discovery with CMake and CTest
  • Diagnosing test failures or flaky behavior
xu-xiang/everything-claude-code-zh2KUpdated Mar 5, 2026

Run a structured verification pass after major code changes or before a pull request. Check build output, types, lint, tests and coverage, possible exposed secrets, and changed files, then summarize results and outstanding issues in a readiness report.

  • Checking a change before opening a pull request
  • Verifying a refactor across build, types, and tests
  • Reviewing coverage and possible exposed secrets
xu-xiang/everything-claude-code-zh2KUpdated Mar 5, 2026

springboot-tdd

FreeSummary

Use this skill to develop or refactor Spring Boot services with test-driven development. It guides unit, web, persistence, and integration tests using JUnit 5, Mockito, MockMvc, Testcontainers, and JaCoCo coverage checks.

  • Adding a feature to a Spring Boot service with tests first
  • Writing tests for a Spring MVC endpoint
  • Testing persistence with a production-like database container
xu-xiang/everything-claude-code-zh2KUpdated Mar 5, 2026

Run a structured verification cycle for Spring Boot changes before a pull request or deployment. It covers builds, static code checks, tests with coverage reports, security scans, and a final diff review, then summarizes failures and readiness in a report.

  • Verify a Spring Boot change before opening a pull request
  • Check a project after a major refactor or dependency upgrade
  • Review build, test coverage, and security scan results before deployment
xu-xiang/everything-claude-code-zh2KUpdated Mar 5, 2026

python-testing

FreeSummary

Design and write Python tests with pytest, using test-driven development (writing a failing test before implementation), reusable fixtures, mocks for external dependencies, parameterized cases, and coverage reports. It also covers async code and organizing unit and integration tests.

  • Start a Python feature with a failing test
  • Build reusable pytest fixtures
  • Test errors and external calls with mocks
xu-xiang/everything-claude-code-zh2KUpdated Mar 5, 2026

Run a structured verification cycle for Django changes before a pull request or deployment. Check migrations, code style and types, tests with coverage reports, dependency and configuration security, performance, static assets, and deployment readiness in a reportable checklist.

  • Checking Django changes before opening a pull request
  • Verifying migrations after model or dependency changes
  • Reviewing tests, coverage, and security before deployment
xu-xiang/everything-claude-code-zh2KUpdated Mar 5, 2026

security-scan

FreeSummary

Use this skill to audit Claude Code configuration with AgentShield. It scans files and settings such as CLAUDE.md, settings.json, MCP servers, hooks, and agent definitions for security issues, misconfiguration, exposed secrets, and injection risks, with reports in several formats.

  • Auditing a new Claude Code project
  • Checking configuration changes before committing
  • Reviewing MCP servers, hooks, and agent definitions
xu-xiang/everything-claude-code-zh2KUpdated Mar 5, 2026

django-tdd

FreeSummary

Use this skill to plan and write tests for Django applications with pytest-django, factory_boy, and Django REST Framework. It covers a test-driven workflow, model and view checks, API tests, mocking external services, fixtures, and coverage reporting.

  • Starting a test suite for a Django project
  • Testing Django models, views, and serializers
  • Checking Django REST Framework API behavior
xu-xiang/everything-claude-code-zh2KUpdated Mar 5, 2026

eval-harness

FreeSummary

Set success criteria before implementation, check new capabilities and regressions, and report agent reliability with pass@k measures. The framework supports code-based, model-based, and human review for Claude Code tasks.

  • Define acceptance criteria before coding
  • Check that changes do not break existing behavior
  • Track agent success across repeated attempts
xu-xiang/everything-claude-code-zh2KUpdated Mar 5, 2026

security-review

FreeSummary

Use this skill to review application code around authentication, APIs, user input, secrets, payments, and sensitive data. It provides a security checklist and examples covering validation, access control, injection and browser attacks, rate limits, logging, dependencies, and security tests.

  • Reviewing a new authentication flow
  • Checking validation for user input or uploads
  • Auditing API authorization and rate limits
xu-xiang/everything-claude-code-zh2KUpdated Mar 5, 2026

e2e-testing

FreeSummary

Build and maintain Playwright end-to-end tests with examples for organizing test files, using Page Object Model, configuring browsers and CI runs, and saving reports, screenshots, traces, and videos. The guide also covers ways to identify and handle flaky tests.

  • Structuring browser-based end-to-end tests
  • Creating reusable page objects
  • Running Playwright tests in CI
xu-xiang/everything-claude-code-zh2KUpdated Mar 5, 2026

Use this skill to review and configure security for Spring Boot services. It covers authentication and authorization, input validation, SQL injection prevention, CSRF and CORS, secrets, response headers, rate limiting, dependency checks, and safe handling of sensitive data in logs.

  • Adding JWT, OAuth2, or session authentication
  • Restricting access to sensitive endpoints
  • Validating request data and preventing SQL injection
xu-xiang/everything-claude-code-zh2KUpdated Mar 5, 2026

django-security

FreeSummary

Review and configure security practices for Django applications. The skill covers authentication and permissions, secure production settings, CSRF and XSS defenses, safe database queries, file uploads, API throttling, security headers, secrets, and logging.

  • Reviewing security settings before Django deployment
  • Setting up user roles and permissions
  • Preventing unsafe SQL and HTML handling
xu-xiang/everything-claude-code-zh2KUpdated Mar 5, 2026

cpp-testing

FreeSummary

Work on tests for modern C++ projects with GoogleTest, GoogleMock, CMake, and CTest. Create or repair tests, diagnose flaky failures, and configure coverage or sanitizers, tools that help detect memory errors and data races.

  • Writing or repairing C++ tests
  • Setting up GoogleTest and CTest
  • Investigating flaky test failures
xu-xiang/everything-claude-code-zh2KUpdated Mar 5, 2026