跳到正文
cccskills

测试与安全技能

测试设计、漏洞检测、质量保证(1.3万 个)

按价格或排序方式筛选

tdd

免费

AI DevKit · Test-driven development — write a failing test before writing production code. Use when implementing new functionality, adding behavior, or fixing bugs during active development.

中文简介正在准备中。当前显示原文说明。

codeaholicguy/ai-devkit16522026年10月24日 更新

AI DevKit · Review code, skills, and prompts for security vulnerabilities — OWASP Top 10, prompt injection, business logic flaws, and insecure defaults. Use when reviewing PRs, auditing modules, reviewing AI skills/prompts, or preparing for release.

中文简介正在准备中。当前显示原文说明。

codeaholicguy/ai-devkit16522026年10月24日 更新

verify

免费

AI DevKit · Enforce evidence-based completion claims — require fresh command output before reporting success. Use when completing any task, fixing a bug, finishing a phase, running tests, building, deploying, or making any "it works" claim.

中文简介正在准备中。当前显示原文说明。

codeaholicguy/ai-devkit16522026年10月24日 更新

AI DevKit · Review and improve documentation for novice users. Use when users ask to review docs, improve documentation, audit README files, evaluate API docs, review guides, or improve technical writing.

中文简介正在准备中。当前显示原文说明。

codeaholicguy/ai-devkit16522026年10月24日 更新

AI DevKit · Use when the user asks to brainstorm, ideate, generate ideas, expand options, challenge ideas, pressure-test ideas, compare concepts, narrow choices, name something, plan content angles, explore strategy, evaluate product ideas, technical approaches, experiments, or decisions.

中文简介正在准备中。当前显示原文说明。

codeaholicguy/ai-devkit16522026年10月24日 更新

AI DevKit · Orchestrator for structured SDLC phase skills. Use when the user wants to run the full lifecycle or choose the next phase across requirements, design, planning, implementation, testing, and review.

中文简介正在准备中。当前显示原文说明。

codeaholicguy/ai-devkit16522026年10月24日 更新

Gate a pitch against one journalist at a time. Runs the pair through proven media-relations checks (last-10-bylines audit, 90-day topic sweep, beat-vs-angle-vs-one-off, the 5 forms of journalism, source-mirror, stated-preferences, database triangulation) and returns fit, soft-fit, no-fit, or unknown with a real recent anchor and specific edits.

中文简介正在准备中。当前显示原文说明。

elvisun/newsjack16492026年10月23日 更新

Gate a prompt universe for schema and provenance completeness, target or campaign contamination, evidence entailment, naturalness, one-concept clarity, architecture consistency, aided status, answer leakage, and semantic duplicates. Use after realistic prompt generation and before human panel selection.

中文简介正在准备中。当前显示原文说明。

elvisun/newsjack16492026年10月23日 更新

Scan a Kotlin or Compose Multiplatform diff for known footgun shapes and open the matching trap to confirm each hit. Use before committing, when reviewing a Kotlin change, or to audit a codebase.

中文简介正在准备中。当前显示原文说明。

maxrave-dev/kotlin-footguns16212026年10月18日 更新

Analyze Gluten ANSI-mode test results (run dev/verify-ansi-expressions.sh, parse JSON tracker output, produce root-cause analysis and fix recommendations). Trigger on user requests like "analyze ANSI tests", "run ANSI matrix", "why is this ANSI test failing".

中文简介正在准备中。当前显示原文说明。

apache/gluten16112026年10月24日 更新

entra-app-registration

Microsoft 官方免费

Guides Microsoft Entra ID app registration, OAuth 2.0 authentication, and MSAL integration. USE FOR: create app registration, register Azure AD app, configure OAuth, set up authentication, add API permissions, generate service principal, MSAL example, console app auth, Entra ID setup, Azure AD authentication. DO NOT USE FOR: Key Vault secrets (use azure-keyvault-expiration-audit), general Azure resource security guidance.

中文简介正在准备中。当前显示原文说明。

microsoft/azure-skills15922026年10月24日 更新

d3k

Vercel 官方免费

Run and debug a local web app with a managed browser and a shared server/browser evidence timeline. Use when asked to develop, test, or reproduce a browser issue with d3k.

中文简介正在准备中。当前显示原文说明。

vercel-labs/dev300015892026年10月23日 更新

Use when an agent folder must pass the Agentlas Cloud 2-stage security scan (static rules + BYOK LLM judgment) before private sync or public publish, or when asked to run/interpret `hephaestus security scan`.

中文简介正在准备中。当前显示原文说明。

agentlas-ai/Agentlas-OS15832026年10月24日 更新

Use when generating or auditing a multi-role agent team package with orchestrator, PM Soul, Memory Curator, Policy Gate, workers, eval, QA, handoffs, and runtime adapters.

中文简介正在准备中。当前显示原文说明。

agentlas-ai/Agentlas-OS15832026年10月24日 更新

Use when adding or auditing Agentlas skill lifecycle metadata, skill-registry.json, trial evidence, Curator promotion decisions, or first-class skill promotion gates.

中文简介正在准备中。当前显示原文说明。

agentlas-ai/Agentlas-OS15832026年10月24日 更新

Use when adding or auditing local runtime behavior that turns a project folder into an Agentlas-aware workspace with .agentlas memory and sitemap files.

中文简介正在准备中。当前显示原文说明。

agentlas-ai/Agentlas-OS15832026年10月24日 更新

Create new skills, modify and improve existing skills, and measure skill performance. Use when users want to create a skill from scratch, update or optimize an existing skill, run evals to test a skill, benchmark skill performance with variance analysis, or optimize a skill's description for better triggering accuracy.

中文简介正在准备中。当前显示原文说明。

Memento-Teams/Memento-Skills15762026年8月17日 更新

Verify that Minutes is properly set up and working — model downloaded, mic accessible, directories exist, no stale state. Use when the user says "is minutes working", "check my setup", "verify minutes", "test recording setup", "why isn't minutes working", "minutes health check", or after running setup for the first time.

中文简介正在准备中。当前显示原文说明。

silverstein/minutes15682026年10月24日 更新

incident-response

Microsoft 官方免费

Run a structured Azure incident response workflow for triage, diagnosis, mitigation, and root cause analysis. Use when operations or security teams need guided incident handling for Azure service symptoms.

中文简介正在准备中。当前显示原文说明。

microsoft/hve-core15662026年10月24日 更新

risk-register

Microsoft 官方免费

Create a qualitative risk register and mitigation plan using a Probability x Impact matrix. Use when a project needs structured risk identification, scoring, ownership, and response planning.

中文简介正在准备中。当前显示原文说明。

microsoft/hve-core15662026年10月24日 更新

owasp-infrastructure

Microsoft 官方免费

OWASP Infrastructure Top 10 knowledge base for identifying, assessing, and remediating internal IT infrastructure security risks.

中文简介正在准备中。当前显示原文说明。

microsoft/hve-core15662026年10月24日 更新

owasp-cicd

Microsoft 官方免费

OWASP CI/CD Top 10 knowledge base for identifying, assessing, and remediating CI/CD pipeline security risks.

中文简介正在准备中。当前显示原文说明。

microsoft/hve-core15662026年10月24日 更新

supply-chain-security

Microsoft 官方免费

Software supply chain security reference for OpenSSF Scorecard, SLSA, Sigstore, SBOM, and posture/backlog taxonomies.

中文简介正在准备中。当前显示原文说明。

microsoft/hve-core15662026年10月24日 更新

owasp-agentic

Microsoft 官方免费

OWASP Agentic Security Top 10 knowledge base for identifying, assessing, and remediating AI agent system security risks.

中文简介正在准备中。当前显示原文说明。

microsoft/hve-core15662026年10月24日 更新