테스트·보안 스킬

Run the full on-track check on a conversation, project, or keyword the owner names: find the sessions, extract exactly what he typed, dispatch independent judges who go to the live product as him and report what was missed, plan the remedy, and return one page — what he will see, what is missing, the plan. Use when told to check whether work is on track, to audit a project that has drifted, on 'run the on-track check on X', or when a long campaign is about to freeze, hand off, or claim done.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Next.js route metadata, per-route favicons, OpenGraph, and Twitter cards. Use when adding a route or layout, adding a favicon or social share image, auditing missing metadata, naming tab titles, or touching createRouteMetadata, createDynamicRouteMetadata, generateFaviconMetadata, or titlePrefix.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Audit-and-fix method for one user setting area across every repo. Use when a setting seems ignored, duplicated or confusing, on 'audit the X settings' or 'why doesn't my X setting apply', or as a lane of the settings sweep. NOT for adding a new setting (use build-sub-feature).

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Live real tests proving an AI Matrx agent really works. Use when you built or changed an agent, mandate, prompt, tool, model setting, binding or a workflow step that runs agents; when told to use safety-net; or to check an area works. NOT for one automated test (use forcing-function-tests).

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Super-Admin-only lock-down pattern. Use before touching admin.admins, admin.admin_audit_log, is_super_admin() / requireSuperAdmin() / selectIsSuperAdmin, app/api/admin/admins/**, app/(admin)/administration/users/admins/**, the admin RPCs (admin_promote, admin_update, admin_revoke, admin_list, admin_list_audit, admin_find_user_by_email), createAdminClient(), a new RLS policy, SECURITY DEFINER RPC, or admin-gated route, or when locking a sensitive table to Super Admin.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

The agent.review_queue register for work Arman must see or test in the UI. Use at the end of any task that produced something reviewable, at the start of a task to check prior feedback, and when reviewing, claiming, routing, or repairing a queue row.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Working playbook preloaded into the browser-tester helper; the coach updates its Lessons after each round. Use only when acting as browser-tester or coaching it. NOT for general UI work (use matrx-frontend's browser-testing doc).

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

The bar every automated test or guard must clear: green only when the real system works. Use when writing, fixing, or reviewing a test, mock, stub, fixture, snapshot, or self-test; adding a regression test for a bug; or about to call work done because tests pass.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

A live demo or admin page shipped with every feature whose results the user would otherwise not see. Use when building or extending a server-side capability, service, registry, or pipeline, or adding a backend endpoint or feature with no UI, whose output only shows in logs, the DB, or an agent run, or when the user says there's no way to see it or asks 'how do I test this'.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Doctrine for auditing an ENTIRE feature and building it to its ideal state. Use on 'deep dive on X', 'audit the X feature', 'figure out everything X does', 'take over X and finish it', 'bring X up to best practices', or when a whole feature needs overhauling, unifying, or finishing, not patching. NOT for one small addition (use build-sub-feature).

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

The re-measure and standing report of the canonical data model's live DB conformance. Use when asked 'where are we at' on DB drift or conformance, to update the drift numbers, when a drift-audit brief is re-issued, or on /drift-audit. NOT the per-table fix recipe (use matrx-frontend's db-canonicalize-table).

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

The interview primitive for putting open decisions to an owner. Use on 'grill me', 'stress-test this', or 'what do you need from me before you build this', and whenever a plan, scope, spec, vision, or question ledger needs owner rulings. NOT for steps only a human can perform (use a guided session).

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Doctrine for adding a capability INTO a live, existing feature to a world-class bar. Use on 'add X to Y', 'extend Y to support X', a new option, button, setting, endpoint, or tool for Y, or a sub-feature spec to implement. NOT for whole-feature audits or overhauls (use feature-deep-dive).

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Build voice AI agents with LiveKit Cloud and the Agents SDK. Use when the user asks to "build a voice agent", "create a LiveKit agent", "add voice AI", "implement handoffs", "structure agent workflows", or is working with LiveKit Agents SDK. Provides opinionated guidance for the recommended path: LiveKit Cloud + LiveKit Inference. REQUIRES writing tests for all implementations.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Always use browser-harness for any web interaction: automation, scraping, testing, or site/app work.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

ローカルで改修した `skills/<skill-name>/` を upstream リポジトリ (Fandhe-AI/agent-cli-skills 等) へ PR として投稿する。`skills-lock.json` の `source` を読み、`Fandhe-AI/` 以外への push は安全弁で中止。clone → 反映 → セキュリティチェック → ブランチ作成 → push → `gh pr create` を実行。マージ後は sync-skills-lock で hash 更新。「スキルを upstream に貢献」「外部リポジトリに PR」などで使用。

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

GitHub Issue を読み込み、`_/local-plans/<issue-number>-<slug>.md` に詳細計画を作成して**ユーザー承認後**にコードを実装する。実装後はセキュリティレビュー (OWASP Top 10) → テスト実行 → Conventional Commits でコミット。Issue 番号や URL を渡された実装依頼、「Issue #N を実装して」「この Issue を着手」などで使用。

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Vitest 5 (Vite ネイティブテストフレームワーク) リファレンス。 test, describe, it, expect, vi.fn, vi.mock, vi.spyOn, vi.when、 beforeEach / afterEach、test.extend fixtures、test tags / annotations、 coverage (v8 / istanbul)、snapshot、vitest.config.ts、projects (old workspace)、 Vitest Browser Mode (vitest-browser-react, locators, expect.element)、UI モード、bench fixture。

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Conventional Commits 形式で GitHub PR を作成する。OWASP Top 10 のセキュリティチェック必須で、問題があれば PR 作成を中止。Summary/Test plan/Design を含む body を生成。「PR 作って」「プルリク」「`gh pr create`」などで使用。別リポジトリ (upstream) への貢献は contribute-skill。

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

コード変更 (`git diff`) の品質・アーキテクチャ準拠・セキュリティ (OWASP Top 10) を Agent ツール委譲で読み取り専用レビューする。コミット前/PR 作成前のセルフレビュー、「変更をレビューして」「コードレビューして」などで使用。GitHub PR のレビューには implement-review-pr を使用。

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

GitHub PR の CI ステータス (`gh pr checks`)・コード品質・セキュリティ (OWASP Top 10)・Conventional Commits 準拠をレビューする。`gh pr review --approve/--request-changes/--comment` でレビュー投稿も可能。「PR #N をレビュー」「PR レビューして」などで使用。ローカル diff のレビューには implement-review を使用。

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Windows アプリ開発 (WinUI 3 / Windows App SDK) のテスト・性能・アクセシビリティ・スレッド。 MSTest, xUnit, NUnit, WinAppDriver, Appium, Playwright, WebView2 テスト, CI, WACK, MSIX サイドローディング, version adaptive。LoggingChannel / ETW, WPT, WPA, プロファイリング, GC, 起動性能, XAML 最適化, ListView/GridView 仮想化。UI Automation, AutomationProperties, automation peers, キーボード操作性, ハイコントラスト, Narrator。DispatcherQueue, DispatcherQueueTimer, WinRT 非同期パターン, async/await, ConfigureAwait, スレッドプール, STA/MTA, デッドロック回避, バックグラウンドタスク。

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

OpenAI API (developers.openai.com) の運用・管理リファレンス。 Administration API, admin API keys, RBAC, roles, groups, invites, projects, spend limits, audit logs, usage / costs API, Terraform provider (openai/openai), workload identity federation (WIF, OIDC / SPIFFE / X.509 / Idira), moderation API, misalignment monitoring, safety alerts / cases, safety best practices, under-18 guidance, ZDR Private Safety Processing (PSP), production best practices, deployment checklist, cost / latency optimization, fast / ultrafast mode, Realtime API costs。 rate limits・error handling・prompt caching・webhooks は openai-api-core、Codex WIF・管理は openai-codex。

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Playwright v1.64 (E2E / コンポーネントテストフレームワーク) リファレンス。 test, expect, page, locator, getByRole / getByText / getByLabel / getByTestId / getByRef、 toBeVisible, click, fill, route, mock, fixtures、playwright.config.ts、 auth 永続化、Credentials (passkeys / WebAuthn)、WebStorage、WebMCP、 Playwright MCP / playwright-cli、trace viewer、screencast、test locks、codegen、UI モード。

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.