测试与安全技能

Create and maintain one committed per-project memory file (PROJECT.md) so agents stop re-discovering the same facts every cold session. Stores only the stable, expensive-to-rediscover, not-in-the-code context — architecture + why, build/test/run commands, decisions and dead-ends — as human-readable markdown, versioned with the code so it can't silently rot. Use when asked to set up project memory/context, stop agents re-grepping the codebase, scaffold or refresh a PROJECT.md / CLAUDE.md memory section, or cut cold-start rediscovery cost. Prose context only — never code, config, or data.

中文简介正在准备中。当前显示原文说明。

Operate and extend GeoNode geospatial content-management deployments, resource APIs, uploads, metadata/catalogues, GeoServer security, harvesting, and administration with explicit service and safety gates.

中文简介正在准备中。当前显示原文说明。

Use when working with ESPnet speech AI toolkit: installation, ESPnet2 recipes and training, pretrained inference/model zoo, ESPnet3 stage workflows, and repository testing.

中文简介正在准备中。当前显示原文说明。

Route EdgeConnect requests for image inpainting setup, data preparation, training, checkpoint-backed testing, and evaluation.

中文简介正在准备中。当前显示原文说明。

Use when building, debugging, testing, or maintaining Plotly Dash applications, callbacks, server backends, component packages, renderer internals, and Dash repository workflows.

中文简介正在准备中。当前显示原文说明。

Operate the Bindu agent microservice framework: Python bindufy agents, A2A protocol, security, gRPC SDKs, deployment, Gateway, and Inbox.

中文简介正在准备中。当前显示原文说明。

Route Airweave tasks to the most specific sub-skill: local-development, backend-api, source-connectors, frontend-dashboard, connect-widget, mcp-search, or monke-e2e.

中文简介正在准备中。当前显示原文说明。

Tạo AI Skill mới từ ý tưởng hoặc quy trình công việc. Kết hợp phỏng vấn thông minh, pattern detection, và quantitative evaluation để tạo skill chất lượng production. Dùng khi user nói "tạo skill", "biến quy trình thành skill", "make a new skill", "tự động hóa công việc này", hoặc mô tả quy trình lặp lại mà họ muốn AI tự làm. Cũng dùng khi user muốn cải thiện, test, hoặc optimize skill hiện có.

中文简介正在准备中。当前显示原文说明。

Use when auditing marketing, messaging, offers, funnels, or content strategy. Triggers on "audit my marketing", "review my landing page", "improve my funnel", "content strategy review", "messaging review", "offer feedback", "marketing checkup", "why isn't my marketing working", "audit my brand". Works at any budget or company size.

中文简介正在准备中。当前显示原文说明。

Use when someone wants to build, refine, or audit their personal brand positioning across professional platforms. Triggers on "personal brand", "brand positioning", "brand voice", "how should I position myself", "professional identity", "LinkedIn presence", "build my brand".

中文简介正在准备中。当前显示原文说明。

Use when a pipeline DOT file has passed structural validation but may still have flow inefficiencies, spec fidelity gaps, or information loss in prompts. Use after dotfile-audit or dotfile-from-spec when you want to deeply verify a pipeline captures everything from the original spec. Use when prompts might be missing critical domain rules, data models, or invariants.

中文简介正在准备中。当前显示原文说明。

Use when you have an existing pipeline DOT file that needs review, fixing, or validation. Use when validation produces warnings or errors, when a DOT file was hand-written or generated by another tool, or when you want to verify a pipeline covers 100% of a spec before running it.

中文简介正在准备中。当前显示原文说明。

Audit and improve SwiftUI runtime performance from code review and architecture. Use for requests to diagnose slow rendering, janky scrolling, high CPU/memory usage, excessive view updates, or layout thrash in SwiftUI apps, and to provide guidance for user-run Instruments profiling when code review alone is insufficient.

中文简介正在准备中。当前显示原文说明。

IDOR / BOLA hunting - two-account methodology, identifier discovery and UUID leak chaining, the trusted-identifier test, GraphQL node and nested-object IDOR, cross-tenant escalation, write and delete operations. Bounded ID sampling, never range sweeps. Wiki-first, FIND schema output. Trigger on IDOR, BOLA, broken access control, object level authorization, cross-tenant, "read another user's data", "swap the id", or any API path or parameter carrying a numeric ID, UUID, or account identifier.

中文简介正在准备中。当前显示原文说明。

Shared discipline for every hunt-* skill: scope and authorization gating, the two-account rule, the confirmation gate that separates a real finding from a false positive, enumeration limits, stop conditions, marker discipline, wiki-first query and self-heal, FIND output, Deadends, and wiki distillation. ALWAYS LOADED alongside any hunt skill. Also trigger directly on "is this in scope", "is this a real bug", "how do I confirm this", "should I keep going", "how many IDs should I test", "what severity", "how do I report this", "I got someone else's data". Every hunt-* skill assumes this file; without it they run without their safety and quality layer.

中文简介正在准备中。当前显示原文说明。

OFFLINE FALLBACK for the claude-md-management plugin - prefer that plugin when it is installed. Audit and improve CLAUDE.md files - scan for CLAUDE.md files, evaluate quality against templates, output a report, then make targeted updates. Invoke explicitly (/claude-md-improver) when the plugin is unavailable.

中文简介正在准备中。当前显示原文说明。

Updates an existing package Skill for a new release of its npm or local package by testing only what changed since the version the Skill names. Use when a maintainer asks to refresh a package Skill after a release, or when a SKILL.md names an older tested version than the package.

中文简介正在准备中。当前显示原文说明。

Generate or update an Agent Skill that teaches consumers one npm or local package the user maintains, including framework modules and wrappers. Tests each example against the installed version. Use when a maintainer asks for a package Skill, a SKILL.md for their library, or a Skill update after a release.

中文简介正在准备中。当前显示原文说明。

Validate, lint, audit, or check Terragrunt .hcl/terragrunt.hcl files, stacks, modules, compliance.

中文简介正在准备中。当前显示原文说明。

Validate, lint, audit, or check Makefiles and .mk files for errors.

中文简介正在准备中。当前显示原文说明。

Validate, lint, audit, or debug Ansible playbooks, roles, inventories, FQCN, tasks.

中文简介正在准备中。当前显示原文说明。

Validate, lint, audit, or fix PromQL queries and alerting rules; detects anti-patterns.

中文简介正在准备中。当前显示原文说明。

Validate, lint, audit, or check Jenkinsfiles and shared libraries.

中文简介正在准备中。当前显示原文说明。

Validate, lint, audit, check Helm charts — Chart.yaml, templates, values.yaml, CRDs, schemas.

中文简介正在准备中。当前显示原文说明。