测试与安全技能

Execute test suites with proper configuration, parallel execution, and detailed reporting. Use when running unit tests, integration tests, or full test suites.

中文简介正在准备中。当前显示原文说明。

Auto-activates during requirements analysis to assess security risks using OWASP Top 10 framework, identify security requirements, and recommend mitigation strategies.

中文简介正在准备中。当前显示原文说明。

Permission test. Use for testing.

中文简介正在准备中。当前显示原文说明。

Generate Jest-based unit tests for JavaScript/TypeScript code. Creates test files following Jest conventions with proper mocking, describe blocks, and coverage.

中文简介正在准备中。当前显示原文说明。

Implement features with code, tests, and documentation. Use when building features from approved designs following TDD and project coding standards.

中文简介正在准备中。当前显示原文说明。

File permission test. Use for testing.

中文简介正在准备中。当前显示原文说明。

Generate pytest-based unit tests for Python code. Creates test files following pytest conventions with proper fixtures, mocking, and parametrization.

中文简介正在准备中。当前显示原文说明。

Verify compliance with OWASP Top 10 2021 security standards. Use when performing OWASP compliance checks and security certification.

中文简介正在准备中。当前显示原文说明。

Generate comprehensive integration tests for component interactions, workflows, and system boundaries. Use for testing API endpoints, database operations, and multi-component flows.

中文简介正在准备中。当前显示原文说明。

Scan codebase for security vulnerabilities including secrets, insecure dependencies, and unsafe code patterns. Use when performing automated security scans.

中文简介正在准备中。当前显示原文说明。

Check version compatibility, breaking changes, and security vulnerabilities for dependencies

中文简介正在准备中。当前显示原文说明。

Assess identified vulnerabilities for exploitability, impact, and risk. Provide CVSS scoring and remediation strategies. Use when analyzing security findings.

中文简介正在准备中。当前显示原文说明。

Run security verification — SAST pattern scanning, DAST against a running app, OWASP Top 10 compliance, CVSS assessment, and adversarial code audit. Use before commit/push or when checking code for vulnerabilities. Trigger on "security scan", "is this vulnerable", "OWASP check", "security verify", "scan for vulnerabilities".

中文简介正在准备中。当前显示原文说明。

Validate WCAG 2.1 Level AA compliance and accessibility best practices. Use when performing accessibility audits and WCAG certification.

中文简介正在准备中。当前显示原文说明。

Analyze feature requirements, dependencies, and security considerations. Use when starting feature implementation from GitHub issues to understand scope, technical feasibility, and risks.

中文简介正在准备中。当前显示原文说明。

Generate comprehensive API endpoint tests for REST and GraphQL APIs. Creates tests for all HTTP methods, status codes, authentication, and validation.

中文简介正在准备中。当前显示原文说明。

Analyze test coverage with detailed metrics, identify gaps, and generate comprehensive reports. Use when measuring code coverage, finding untested code, or validating coverage thresholds.

中文简介正在准备中。当前显示原文说明。

Full validation gate before committing — quality checks, tests, coverage, security scan, changelog, and companion review. Use right before a commit to verify code is ready. Trigger on "pre-commit", "validate before commit", "ready to commit", "run all checks".

中文简介正在准备中。当前显示原文说明。

Query, update, and audit the registry of all Claude Code components (skills, agents, rules, hooks, plugins) with PDCA lifecycle tracking. Use when listing/inspecting components, finding stale ones, or registering new ones. Trigger on "list skills", "component registry", "what skills exist", "stale skills", "/registry".

中文简介正在准备中。当前显示原文说明。

Audit dependency freshness — scan outdated deps and CVEs, classify severity, record update/defer/skip decisions in Atrium, gate PASS/WARN/FAIL. Use when checking for outdated packages or deciding whether to upgrade. Trigger on "outdated dependencies", "dependency audit", "are my deps up to date", "should I upgrade".

中文简介正在准备中。当前显示原文说明。

Create comprehensive pull requests with detailed descriptions, test plans, and proper git workflow. Use when finalizing features to ensure high-quality PRs.

中文简介正在准备中。当前显示原文说明。

Forensic scan for npm/PyPI supply-chain compromise (Shai-Hulud/TeamPCP campaigns) — checks persistence, hook injection, compromised packages, IOC strings, C2, dead-man switches. Use when auditing a machine or repo for malicious dependencies. Trigger on "supply chain audit", "check for compromised packages", "Shai-Hulud", "scan for malicious deps".

中文简介正在准备中。当前显示原文说明。

Detect technical debt — duplicated code, dead code, TODOs, and oversized functions across the codebase. Use at the end of a session or when auditing code hygiene. Trigger on "find tech debt", "any dead code", "duplicated code", "code hygiene", "techdebt".

中文简介正在准备中。当前显示原文说明。

Generate unit test files with structure, fixtures, and mocking patterns for Python (pytest) or JS/TS (Jest), auto-detecting the framework. Use when starting tests for a source file. Trigger on "scaffold tests", "generate test file", "write test boilerplate", "set up tests for".

中文简介正在准备中。当前显示原文说明。