테스트·보안 스킬

Runs the Implement→Review→Test→Fix cycle until the work is actually clean, with evidence. Use after any non-trivial implementation and before claiming it is done.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Audits tests for concurrency safety — race conditions, shared mock state, cleanup ordering. Use when writing tests that involve goroutines, async operations, or shared mutable state.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Generates a behavioral scenario acceptance matrix for comprehensive test coverage planning. Maps user scenarios to acceptance criteria with stable IDs. Use when planning test coverage for a complex feature, before a release or milestone review, or when someone asks what is tested.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Closes a large backlog of findings (a gap analysis, an audit, or 10+ bugs) in prioritized waves. Loops through triage, dependency analysis, parallel fix streams, a test gate, and re-audit until the target is met. Use after a gap analysis, audit, or review produces 10+ findings, or to burn down a large bug or tech-debt backlog.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Scans staged changes for secrets, debug statements, TODOs without references, and other common commit mistakes. Use before creating any commit.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Strips AI-generation "smell" from prose before it ships (READMEs, docs, release notes, PR descriptions, posts, emails). Counts measurable tells first (keyword saturation, tricolons and anaphora, the "not X, it's Y" reflex, fragment-for-emphasis, bolded thesis lines, listicle-ization, signpost phrases, filler vocabulary, em-dashes, engineered-quotable closers), then applies a "doing work or reflex?" test to each instance so genuine voice survives. Use when asked to de-slop text or make it sound human, when text reads as machine-written, and as the final pass on prose the agent drafted.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Implements snapshot/golden file tests with temporal normalization so tests don't break daily. Use when implementing tests that compare output against expected snapshots.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Assesses production readiness or audits a codebase against its specs. Supports quick static mode, deep 17-dimension audit, or single-dimension focus. Use before a production launch, after a major refactor, when inheriting a codebase, or when someone asks how done the project is.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Generates fuzz test scaffolding for parsers handling external input (YAML, JSON, config files, user input). Seeds corpus from existing fixtures and runs initial pass. Use when implementing or changing a parser, or any code that ingests user input, webhook payloads, API responses, or file formats.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Generates edge case, failure mode, and spec-driven test cases. Covers boundary values, nil inputs, concurrency, resource exhaustion, malformed data, and requirement-linked traceability tests. Use after happy-path tests exist and before claiming coverage is complete, when requirements lack tests, or before a security review.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Assess readiness for compliance audits. Use when a senior developer needs a gap analysis for standards.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Create a minimal, repeatable reproduction plan for a bug. Use when a junior developer needs clear steps to reproduce and capture evidence.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Harden configuration and defaults for safer deployment. Use when a mid-level developer needs to reduce misconfig risks.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Audit dependencies for licensing, security, and maintenance risk. Use when a senior developer needs risk assessment.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Scan code or configuration for common security issues. Use when a mid-level developer needs a quick security pass.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Perform threat modeling for a system or feature. Use when a senior developer needs security risk assessment.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Plan integration tests across modules or services. Use when a mid-level developer needs to verify system interactions.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Generate starter unit tests for a small function or module. Use when a junior developer needs test scaffolding and edge cases.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Review a pull request for correctness, regressions, and missing tests. Use when a mid-level developer needs structured review guidance.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

AWS Security Audit workflow skill. Use this skill when the user needs Comprehensive AWS security posture assessment using AWS CLI and security best practices and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

AWS Penetration Testing workflow skill. Use this skill when the user needs Provide comprehensive techniques for penetration testing AWS cloud environments. Covers IAM enumeration, privilege escalation, SSRF to metadata endpoint, S3 bucket exploitation, Lambda code extraction, and persistence techniques for red team operations and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

AWS Penetration Testing workflow skill. Use this skill when the user needs Provide comprehensive techniques for penetration testing AWS cloud environments. Covers IAM enumeration, privilege escalation, SSRF to metadata endpoint, S3 bucket exploitation, Lambda code extraction, and persistence techniques for red team operations and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

AWS Security Audit workflow skill. Use this skill when the user needs Comprehensive AWS security posture assessment using AWS CLI and security best practices and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

AWT — AI-Powered E2E Testing (Beta) workflow skill. Use this skill when the user needs AI-powered E2E web testing — eyes and hands for AI coding tools. Declarative YAML scenarios, Playwright execution, visual matching (OpenCV + OCR), platform auto-detection (Flutter/React/Vue), learning DB. Install: npx skills add ksgisang/awt-skill --skill awt -g and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.