007
無料Security audit, hardening, threat modeling (STRIDE/PASTA), Red/Blue Team, OWASP checks, code review, incident response, and infrastructure security for any project.
日本語の概要は準備中です。原文の説明を表示しています。
This skill should be used when the user asks for an accessibility review, accessibility audit, a11y check, WCAG compliance review, screen reader audit, "is this accessible?", "does my site meet WCAG?", "check my component for accessibility", "accessibility overview of this page", "review accessibility of", "check for a11y issues", "fix accessibility issues", or any request to audit a web page, component, or codebase for WCAG 2.2 AA compliance.
インストールする前に、エージェントに与えられる指示の中身を確認できます。
Perform a structured WCAG 2.2 AA accessibility audit of the specified component, page, or codebase. Execute all eight phases in order and produce an actionable, severity-ranked report.
When invoked with a path, audit that file or directory. When invoked with "all" or no argument, locate the main source directory (src/, app/, components/, pages/) and audit the full codebase.
Exclude: node_modules, dist, build, .next, coverage, .astro.
Before checking anything:
Use Glob to discover all UI files:
**/*.tsx, **/*.jsx, **/*.astro — components and pages**/*.html — static markup**/*.css, **/*.scss, **/*.module.css — stylesheets**/tailwind.config.* — Tailwind configurationRead package.json to detect the stack:
Count total component files. Report: "Scanning X components across Y directories."
Check every component file for semantic HTML violations.
<h1> → <h3> with no <h2>)<h1> elements on a single page<h4> inside a card that is font-bold text-sm)<h1> on page-level components<main>, <header>, <nav>, or <footer> landmarks<nav> or <header> elements that lack unique aria-label or aria-labelledby<div id="content"> patterns that should be <main><div onClick> and <span onClick> without role and tabindex<div role="button"> when a <button> should be used<a> tags without href used as buttons<b> / <i> used for semantic emphasis (should be <strong> / <em>)<label> wrapping for icon-only inputs<div> inside <ul>, <ol>, <table> — suggest Fragments<img> without alt attribute<img alt="image">, <img alt="photo">, or file-name-as-alt anti-patterns<img> with redundant alt (same as adjacent caption text)alt="" or role="presentation"Check all ARIA attribute usage across components.
role="button" on <button> — redundantrole="heading" on <h1>–<h6> — redundantrole="list" on <ul> / <ol> — only needed in some browsers with Tailwind list-nonearia-hidden="true" on any element that is focusable or contains focusable childrenaria-hidden ancestoraria-hidden="true" when decorative (or inside a labeled button)<button> with no text content, no aria-label, and no aria-labelledby<button><svg>...</svg></button> with no accessible name<a> with no text, no aria-label, no aria-labelledby<input type="image"> without altaria-expanded attributes hardcoded to "true" or "false" that are not driven by statearia-expanded entirelyaria-checked, aria-selected, aria-pressed not connected to component statearia-expanded="true" — should be aria-expanded={isOpen}aria-live, role="status", or role="alert"role="alert" used for non-urgent messages (should be role="status")Check keyboard operability across all interactive components.
outline: none, outline: 0, or Tailwind outline-none that is not immediately followed by a custom focus indicatorfocus:outline-none without focus-visible:ring-* replacement*:focus { outline: none } global CSS reset without a replacementtabindex values greater than 0 (breaks natural DOM order)order, float, or position: absoluteEscape key handlerTab without providing a clear exit<div role="button"> / <div tabindex="0"> missing keydown/keyup handlers for Enter and SpaceuseEffect that removes a modal/panel from the DOM without calling .focus() on the trigger elementsetIsOpen(false) or onClose() without a preceding triggerRef.current?.focus()Check Tailwind color utility classes and CSS color values for likely contrast failures:
text-gray-400 bg-white, text-yellow-300 bg-white)border-gray-200, border-gray-300) on white backgrounds — likely fail 3:1::placeholder) styled with low-contrast colorsanimation or transition on non-UI state changes (page decorations, hero animations) without @media (prefers-reduced-motion: reduce) overrideanimate-spin, animate-bounce, animate-pulse) applied to non-status elements without motion-reduce: or motion-safe: modifierw-4 h-4, p-0, text-xs buttons that are icon-onlyCheck all form components.
<input>, <select>, <textarea> without an associated <label> (via for/id or wrapping)htmlFor in React that does not match an id on any inputplaceholder used as the only labeling mechanismrequired attribute or aria-required="true"aria-describedbyaria-invalid not set to "true" on invalid inputs during validation<fieldset> + <legend><legend> used but empty or containing only whitespaceCheck all SVG usage.
<svg> without aria-hidden="true" when inside a labeled button or link (screen readers will attempt to read raw SVG content)<svg> without focusable="false" in IE/Edge-compatible codebasesrole="img" and either aria-label or a hidden text alternative<title> but no aria-labelledby pointing to it (cross-browser reliability issue)outline-none without focus-visible:ring-* replacement (most common Tailwind a11y failure)sr-only on icon-only button text labelsmotion-safe: / motion-reduce: usage on animated elementslist-none on <ul> — some screen readers strip list semantics; recommend role="list" if semantics matteraria-* props use JSX booleans correctly: aria-expanded={isOpen} not aria-expanded="true"key props on focusable list items that change order (forces DOM remount, loses focus position)dangerouslySetInnerHTML in components — requires manual a11y verification of injected contentclient:visible or client:idle on keyboard-interactive components — risk of hydration dead zonesdata-* attributes for components that render with client:visiblesrc/layouts/*.astro)asChild usage spreads all props and forwards refs — missing ref breaks Radix focus managementDialog.Content has aria-labelledby pointing to Dialog.TitleGroup findings into four severity levels. Report only findings with evidence.
Issues that make the UI completely unusable for keyboard or screen reader users.
outline-none with no replacement)aria-hidden="true" on focusable elements<div> with no keyboard handlerIssues that significantly impair assistive technology users.
Issues that degrade the experience for some users.
Low-impact issues or recommendations.
lang on <html>tabindex > 0 valuesaria-label on duplicate landmarksFor each finding, output:
[SEVERITY] WCAG X.X.X — Short description
File: path/to/file.tsx:line
Code: <the problematic snippet>
Fix: Specific remediation
End the report with:
Automated scanning (axe-core, Lighthouse) catches ~30–80% of issues. These require manual verification:
Always note when a finding requires manual verification with a screen reader.
まだレビューはありません。使ってみた感想をお寄せください。
概要と使いどころ
Security audit, hardening, threat modeling (STRIDE/PASTA), Red/Blue Team, OWASP checks, code review, incident response, and infrastructure security for any project.
日本語の概要は準備中です。原文の説明を表示しています。
Guides the creation of agile user stories and Gherkin feature files. Use when the user wants to create a user story, write acceptance criteria, define Gherkin scenarios, or author BDD feature files. This should trigger for requests such as Create a user story; Write a user story; I need to write a user story. Part of cursor-rules-java project
日本語の概要は準備中です。原文の説明を表示しています。
Facilitates conversational discovery to create Architectural Decision Records (ADRs) for non-functional requirements using the ISO/IEC 25010:2023 quality model. Use when the user wants to document quality attributes, NFR decisions, security/performance/scalability architecture, or design systems with measurable quality criteria. This should trigger for requests such as Create ADR for Non-functional requirements; Document Non-functional requirements; Capture Non-functional requirements; Generate Non-functional requirements in an ADR. Part of cursor-rules-java project
日本語の概要は準備中です。原文の説明を表示しています。
Run a health check on an existing project: dependency audit, security scan, test runner detection, CI/CD evaluation, and missing configuration analysis. Maps the three execution gates (pre/in/post) from /10x-bootstrapper to an assessment framework for existing codebases. Reads optional context/foundation/stack-assessment.md from /10x-stack-assess to focus checks on identified gaps. Writes context/foundation/health-check.md with findings, prioritized fixes, and an agent-readiness verdict. Use when the user has an existing project and wants to verify its health before working with an agent. Trigger phrases: "health check", "check my project", "audit my project", "is my project healthy", "sprawdź projekt", "audyt projektu", "health-check", "project health". Use AFTER /10x-stack-assess (brownfield chain), BEFORE agent onboarding (m1-l4).
日本語の概要は準備中です。原文の説明を表示しています。
You MUST use this when building projects end-to-end. Orchestrates all 12 team roles — automatically switches between CTO, architect, PM, engineers, SRE, security, DBA, QA, and EM based on the current phase of work. Starts with brainstorming before any implementation.
日本語の概要は準備中です。原文の説明を表示しています。
Use when you need to add or configure Maven plugins in your pom.xml — including quality tools (enforcer, surefire, failsafe, jacoco, pitest, spotbugs, pmd), security scanning (OWASP), code formatting (Spotless), version management, container image build (Jib), build information tracking, and benchmarking (JMH) — through a consultative, modular step-by-step approach that only adds what you actually need. This should trigger for requests such as Add Maven plugins in pom.xml; Improve Maven plugins in pom.xml. Part of cursor-rules-java project
日本語の概要は準備中です。原文の説明を表示しています。