红队渗透 / 攻防 — 受授权的红队作业者 + 渗透测试工程师 + 攻击型安全顾问的认知操作系统 (侦察 OSINT / 外网渗透 / 内网 AD 渗透 BloodHound + Kerberoasting + ADCS 利用 + 横向移动 / Web 应用渗透 OWASP WSTG / 移动 OWASP MASTG / 云渗透 AWS Azure GCP IAM 路径 + 容器逃逸 + K8s / C2 操作 Cobalt Strike Sliver Mythic Havoc + OPSEC / 初始访问 + AV EDR 绕过 (仅授权场景) / 无线 RF / 物理社工 / 报告与整改 / 框架 MITRE ATT&CK + D3FEND + PTES + OSSTMM + NIST 800-115 + Kill Chain / 法律伦理 CFAA + 网络安全法 + 刑法 285 286 + 数据安全法 + GDPR + 授权书 + 范围 + 交战规则 — 不含 黑产 / 未授权攻击 / 大规模 exploitation / 供应链投毒 / 未授权 DoS — 这是 重罪 + 行业封杀 + 律师吊销, 本 skill 严守 authorized-only 边界 — 也不含 蓝队 SOC + 恶意软件 即服务 / 僵尸网络 / 勒索软件作者 — 这是 cybercrime 不是 红队) (Cybersecurity Red Team / Offensive Security Operations — the cognitive operating system of authorized red team operators, penetration testers, and offensive security consultants covering (a) reconnaissance & OSINT (passive + active discovery, asset surface mapping), (b) external network pentest (perimeter, exposed services, web), (c) internal network / Active Directory pentest (AD enumeration via BloodHound, Kerberos abuse — Kerberoasting / AS-REP-roasting / Unconstrained delegation / S4U2self, NTLM relay, ADCS abuse, GPO abuse, lateral movement, privilege escalation), (d) web application pentest (OWASP WSTG, authentication, authorization, SSRF, XXE, deserialization, SSTI, prototype pollution, GraphQL, JWT, API), (e) mobile pentest (OWASP MASTG, iOS / Android, instrumentation Frida / Objection, MASVS), (f) cloud pentest (AWS / Azure / GCP — IAM enumeration, privilege escalation paths, container escape, K8s RBAC, serverless), (g) C2 operations & post-exploitation (Cobalt Strike / Sliver / Mythic / Havoc, beacon ops, malleable profiles, OPSEC), (h) initial access & evasion (phishing infrastructure, payload development, AV / EDR evasion, BYOVD, AMSI / ETW bypass — strictly for authorized engagements), (i) wireless / RF (WPA2/3, evil twin, Wi-Fi pivots), (j) physical / social engineering (badge cloning, pretexting, vishing — under engagement letter), (k) reporting & remediation (executive summary, technical findings, CVSS, MITRE ATT&CK mapping, retest), (l) frameworks & methodology (MITRE ATT&CK, MITRE D3FEND, PTES, OSSTMM, NIST SP 800-115, OWASP WSTG / MASTG, Cyber Kill Chain, Unified Kill Chain, Diamond Model), (m) law & ethics (CFAA US, Computer Misuse Act UK, 中国 刑法 285/286 + 网络安全法 + 数据安全法, GDPR for tested EU systems, engagement letter, scope, rules of engagement, safe harbor for bug bounty); NOT criminal hacking / 黑产 / unauthorized targeting / mass exploitation / supply-chain compromise / DoS against unconsented systems (这是 重罪 + 业内开除 + 律师执照吊销, 本 skill 严守 authorized-only 边界), NOT pure defensive blue team / SOC analyst tradecraft (是 平行学科, 仅做 边界标注 + ATT&CK 反推方向), NOT malware-as-a-service development / botnet ops / ransomware authoring (是 cybercrime 不是 红队), NOT 'ethical hacking' 在 'just curious 看看' 自我合理化的灰色操作 (违反 authorization 原则即不是 红队).) Master OS — automated mastery of Cybersecurity Red Team / Offensive Security Operations — the cognitive operating system of authorized red team operators, penetration testers, and offensive security consultants covering (a) reconnaissance & OSINT (passive + active discovery, asset surface mapping), (b) external network pentest (perimeter, exposed services, web), (c) internal network / Active Directory pentest (AD enumeration via BloodHound, Kerberos abuse — Kerberoasting / AS-REP-roasting / Unconstrained delegation / S4U2self, NTLM relay, ADCS abuse, GPO abuse, lateral movement, privilege escalation), (d) web application pentest (OWASP WSTG, authentication, authorization, SSRF, XXE, deserialization, SSTI, prototype pollution, GraphQL, JWT, API), (e) mobile pentest (OWASP MASTG, iOS / Android, instrumentation Frida / Objection, MASVS), (f) cloud pentest (AWS / Azure / GCP — IAM enumeration, privilege escalation paths, container escape, K8s RBAC, serverless), (g) C2 operations & post-exploitation (Cobalt Strike / Sliver / Mythic / Havoc, beacon ops, malleable profiles, OPSEC), (h) initial access & evasi
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
swaylq/master-skill☆ 1632026년 9월 6일 업데이트
Testing Angular 18-21: TestBed, component harnesses (@angular/cdk/testing), Karma+Jasmine (default historical) vs Jest (jest-preset-angular, modern), Angular Testing Library (RTL-style). HttpClient mocking via HttpTestingController. NgRx Effects testing. Cypress / Playwright e2e. Use this skill to: - Detect runner (Karma+Jasmine vs Jest) and configure correctly. - Write component tests with TestBed. - Use component harnesses for Material / custom UI components. - Mock HttpClient via provideHttpClientTesting + HttpTestingController. - Test signal-based inputs with componentRef.setInput(). - Test NgRx Effects with provideMockActions. Do NOT use this skill for: - General Angular conventions (see angular-conventions). - Routing patterns broadly (see angular-routing — covers testing routes briefly). - Form patterns broadly (see angular-forms).
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
AratKruglik/claude-sdlc☆ 432026년 10월 17일 업데이트
Use this skill when designing the human-executable UAT test cases that prove a Salesforce feature works for a specific persona — the per-persona scripts with preconditions, data setup, permission setup, ordered steps, and pass/fail evidence that close out an RTM row. Trigger keywords: UAT test case salesforce, user acceptance test script salesforce, manual test salesforce feature, UAT script per persona, UAT precondition data setup, UAT permission set assignment for testing, negative path UAT case. NOT for high-level UAT planning, defect classification, regression strategy, or sign-off (use admin/uat-and-acceptance-criteria). NOT for the Given/When/Then technique used to write the AC the case is derived from (use admin/acceptance-criteria-given-when-then). NOT for Apex test method generation (use agents/test-class-generator). NOT for test data factory patterns (use templates/apex/tests/TestDataFactory.cls). NOT for performance or load testing.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
PranavNagrecha/AwesomeSalesforceSkills☆ 202026년 10월 21일 업데이트
Test-Driven Development workflow for Software Metrics Machine. Covers test frameworks (Vitest 4.x for CLI/REST/core/utils, Jest 30.x for webapp), test patterns (describe/it, builder pattern, mocks via vi.fn), test commands, coverage requirements, and the Red-Green-Refactor cycle. USE FOR: write tests, run tests, test this, add tests, testing, coverage, TDD, test-driven development, vitest, jest, test pattern, test convention. DO NOT USE FOR: linting (use lint skill), building (use build commands directly), debugging production issues.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Side-Projects-4-Fun/software-metrics-machine☆ 152026년 10월 21일 업데이트
Expert guidance on Swift Testing best practices, patterns, and implementation. Use when developers mention: (1) Swift Testing, @Test, #expect, #require, or @Suite, (2) "use Swift Testing" or "modern testing patterns", (3) test doubles, mocks, stubs, spies, or fixtures, (4) unit tests, integration tests, or snapshot tests, (5) migrating from XCTest to Swift Testing, (6) TDD, Arrange-Act-Assert, or F.I.R.S.T. principles, (7) parameterized tests or test organization.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
JordanCoin/ios-skills-collection☆ 62026년 9월 10일 업데이트
ペネトレーションテストを対話的に実行するスキル。認可確認(Authorization Gate)→カテゴリ選択(Methodology, Reconnaissance, Scanning, VulnerabilityScanning, WebAppTesting, APITesting, PasswordAttacks, Exploitation, PrivilegeEscalation, ActiveDirectory, PostExploitation, WirelessAttacks, NetworkAttacks, SocialEngineering, CloudPentesting, MobileAppTesting, ContainerK8s, BinaryExploitation, OWASPTop10, Reporting, EmailSecurity, DatabaseAttacks, VPNRemoteAccess の全23カテゴリ)→ツール選択→コマンド実行→発見記録(Finding)→レポート生成をステップバイステップで進行。スコープ/除外チェック・ガードレール付き。「ペンテスト実行」「pentest」「侵入テスト」「脆弱性診断」「セキュリティテスト」「pentest executor」で発火。
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
nogataka/pentest-executor☆ 52026년 3월 14일 업데이트
Use this skill whenever the user wants browser-based end-to-end tests for an Adobe App Builder application. Covers Playwright E2E testing for ExC Shell SPAs, AEM extension UIs, and full-stack flows. Use when the user mentions: "E2E test", "end-to-end test", "Playwright", "browser test", "test my SPA in the browser", "test my AEM extension", "test the full flow", "integration test with UI", "headless browser test", "E2E in CI". This skill is for BROWSER-based testing only. For Jest unit tests of actions or React components, use appbuilder-testing instead.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
OCIOStateOfNebraska/stateofnebraska-aem☆ 32026년 10월 20일 업데이트
Specialized skill for containerized database testing using Testcontainers. Use when testing real database behavior, using SQL Server/PostgreSQL/MySQL containers, testing EF Core/Dapper. Covers container startup, database migrations, test isolation, container sharing. Keywords: testcontainers, container testing, database testing, MsSqlContainer, PostgreSqlContainer, MySqlContainer, EF Core testing, Dapper testing, Testcontainers.MsSql, Testcontainers.PostgreSql, GetConnectionString, IAsyncLifetime, CollectionFixture
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
rudironsoni/Synaxis☆ 22026년 3월 17일 업데이트
Use this skill whenever the user wants browser-based end-to-end tests for an Adobe App Builder application. Covers Playwright E2E testing for ExC Shell SPAs, AEM extension UIs, and full-stack flows. Use when the user mentions: "E2E test", "end-to-end test", "Playwright", "browser test", "test my SPA in the browser", "test my AEM extension", "test the full flow", "integration test with UI", "headless browser test", "E2E in CI". This skill is for BROWSER-based testing only. For Jest unit tests of actions or React components, use appbuilder-testing instead.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
aemgdc/aemdev☆ 22026년 10월 20일 업데이트
Swift의 파일 작업, 통신, 외부 API를 작은 프로토콜로 분리하고 테스트용 대체 구현으로 바꾸어 정상 동작과 오류 처리를 검증합니다.
- 실제 파일 없이 테스트합니다
- 오류를 재현해 처리 방식을 검증합니다
- 앱·테스트·미리보기에서 모듈을 공유합니다
affaan-m/ECC☆ 28.5만2026년 10월 21일 업데이트
중복되거나 검증 내용이 빈약하거나 내부 구현에 의존하는 테스트를 조사합니다. 결함 재발을 감지할 검증을 남기면서 근거에 따라 테스트를 정리하거나 삭제합니다.
- 중복 테스트 감사
- 회귀 감지를 유지하며 테스트 정리
- 내부 구현에 의존하는 테스트 검토
paperclipai/paperclip☆ 10.6만2026년 10월 21일 업데이트
코드에서 테스트가 부족한 부분을 찾고 다음에 추가할 테스트를 제안합니다. 대상 경로와 판정 기준을 지정해 기능 추가 후 점검하거나 지속적으로 탐지할 수 있습니다.
- 기능 추가 후 빠진 테스트 찾기
- 특정 디렉터리의 테스트 부족 확인
- 심각한 테스트 부족부터 검토
ruvnet/ruflo☆ 7.8만2026년 10월 21일 업데이트
Create automated shell script tests with Bats, a Bash testing tool. Check exit codes, output, and failure cases, organize reusable test helpers and data, and run checks across shells or in CI/CD pipelines.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Add automated tests to shell scripts
- Check invalid input and missing file errors
- Test behavior in bash, sh, and dash
wshobson/agents☆ 4.1만2026년 10월 20일 업데이트
Build end-to-end tests with Playwright and Cypress to check complete user workflows, such as login and checkout. Improve test reliability through stable element selection, independent test data, appropriate waits, and debugging with traces and screenshots.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Automate tests for login and checkout workflows
- Investigate tests that fail intermittently
- Run browser tests in CI/CD pipelines
wshobson/agents☆ 4.1만2026년 10월 20일 업데이트
Explore an existing Vitest 3.2 JSON test report to count results, search failed tests, and inspect file errors. Review original diagnostic details and keep tentative explanations separate from evidence, without launching tests.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Check failure counts in an existing test report
- Search failures by file path or diagnostic text
- Inspect file errors separately from failed assertions
QwenLM/qwen-code☆ 2.9만2026년 10월 21일 업데이트
Diagnose failing or intermittent Playwright tests by reproducing errors and examining execution traces. Classify the cause, apply a targeted fix, and run the test ten times to check stability, with recommendations to prevent recurrence.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Fixing a Playwright test that fails consistently
- Investigating tests that pass only sometimes
- Debugging failures limited to CI
alirezarezvani/claude-skills☆ 2.8만2026년 8월 30일 업데이트
Write regression tests that catch recurring bugs in FastMCP changes using pytest. Covers reproducing failures before a fix, testing requests without a network server, and checking outgoing requests while replacing external services with test substitutes.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Reproducing a bug before testing its fix
- Testing MCP behavior without a network server
- Checking requests sent to external services
PrefectHQ/fastmcp☆ 2.8만2026년 10월 21일 업데이트
Generate reusable test helpers for Godot, Unity, or Unreal projects. Create utilities for checking results, building test objects, and replacing dependencies, following the project's configured test framework and existing test patterns.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Create a base library of test helpers
- Share repeated test setup and result checks
- Generate object factories for a specific game system
Donchitos/Claude-Code-Game-Studios☆ 2.7만2026년 10월 19일 업데이트
Set up automated testing before implementation begins. Detect the configured game engine, create test folders and runner configuration, and prepare a GitHub Actions workflow so tests can run automatically on each push.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Set up automated testing before the first sprint
- Create test folders and runner configuration
- Prepare GitHub Actions to run tests on each push
Donchitos/Claude-Code-Game-Studios☆ 2.7만2026년 10월 19일 업데이트
Verify Kortix changes with focused tests and real inputs and outputs. This skill guides test placement, API and CLI workflows, browser checks, database verification, and reporting of results, including skipped cases.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Verify a bug fix with focused tests
- Check API and CLI behavior through real inputs and outputs
- Test database query conditions
kortix-ai/suna☆ 2만2026년 10월 21일 업데이트
Run MNN checks and regression tests on a host computer or Android device, with stage summaries and failure logs. A separate workflow benchmarks LLM prompt processing and token generation on real iPhones and iPads, including branch comparisons.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Run static checks and host regression tests
- Verify selected backends on an Android device
- Benchmark LLM speed and compare branches on iPhone or iPad
alibaba/MNN☆ 1.6만2026년 10월 21일 업데이트
Find changes in observable behavior that existing tests could miss. Map public results to test assertions, identify gaps in boundaries, permissions, and calculations, and propose focused tests, with optional verification when requested.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Check whether existing tests would catch a bug
- Find missing boundary and permission-denial tests
- Review exact amounts and rounding in financial calculations
dotnet/skills☆ 5.7천2026년 10월 21일 업데이트
Browse, inspect, create, and update exploratory testing sessions in TestDino, where testers investigate behavior beyond fixed test steps. Filter sessions by assignee, release, tags, or status, then assign work or change a session’s state using its ID.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- List exploratory testing sessions in a project
- Create a session for authentication regression testing
- Assign a session using an email address
anthropics/claude-plugins-community☆ 4.7천2026년 10월 21일 업데이트
Build a software quality assurance process with structured test cases, execution tracking, bug severity levels, and quality metrics. Includes templates for progress reports and team handoffs, plus prompts for agent-driven test execution.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Setting up a software QA process
- Standardizing test cases and bug reports
- Tracking test progress and release criteria
zebbern/claude-code-guide☆ 4.7천2026년 10월 21일 업데이트