测试与安全技能

Produces structured U.S. legal audit summaries that distill compliance findings into executive-ready risk prioritization and remediation plans, covering likelihood/impact scoring, consequence analysis, and corrective actions with timelines and owners. Use for legal audits, compliance audits, regulatory audits, compliance gap analyses, risk assessments, audit report summaries, or remediation roadmaps. Trigger keywords: audit summary, compliance findings, audit report, risk prioritization, remediation plan, regulatory exposure, corrective action plan.

中文简介正在准备中。当前显示原文说明。

Drafts filing-ready Articles of Incorporation for U.S. non-profit corporations satisfying state corporate law and the IRS organizational test under IRC § 501(c)(3). Enforces mandatory exempt-purpose language, private inurement prohibition, dissolution clause, and political activity limitations. Use when forming a new non-profit, charitable corporation, or tax-exempt entity seeking 501(c)(3) recognition.

中文简介正在准备中。当前显示原文说明。

依据 RGPD 第 28 条、EDPB 07/2020 和 02/2024 号指南、2021 年标准合同条款（CCT）（执行决定 2021/914）、EDPB 01/2020 号建议（Schrems II 之后的补充措施）以及《欧盟条例 (UE) 2024/1689》（《人工智能条例》），对数据处理协议（DPA）进行系统性分析。生成逐条款的 结构化报告（18 个条款：13 项强制 + 5 项补充），附 🟢/🟡/🔴 诊断、可直接插入的 救济条款、国际传输的详细分析、《人工智能条例》核验以及应向供应商提出的问题。 触发词："analyse de DPA"、"audit DPA"、"vérifier un DPA"、"DPA fournisseur"、 "data processing agreement"、"art. 28 RGPD"、"sous-traitant RGPD"、"négociation DPA"、 "review DPA"、"conformité contrat sous-traitance"。

中文简介正在准备中。当前显示原文说明。

对法律文本——合同、法规、规章或裁判文书——进行对抗式压力测试，检验其解释上的歧义： 找出受其约束的人们日后会对其含义产生分歧的薄弱接缝，并将每一处转化为具体的争议场景， 附双方论点、可能的结果和修复方案。当有人希望对法律文件进行压力测试、红队审查、 审计，或找出薄弱点、漏洞、缺口、歧义或起草问题时使用；当起草人希望在合同、法规、 规章或裁判文书发布前将其收紧时使用；当诉讼律师希望从裁判文书或合同中挖掘论点时使用； 或当有人交来一份法律文本并询问它会在哪里引发争议或进行争点识别时使用。对合同审查、 法规歧义分析、裁判文书射程分析和起草质量检查都触发本技能——即使使用者从未说出 "压力测试"或"歧义"。

中文简介正在准备中。当前显示原文说明。

本技能构建 AI 辅助任务的结构化审计轨迹：工具被要求做什么、提供了什么材料、产出了什么、输出如何被验证、最终依赖了什么。它记录工作流以供监督和日后审查，不就特权或披露作出裁定，因此记录保持准确而非自我服务。

中文简介正在准备中。当前显示原文说明。

Drafts an Adverse Event Reporting Policy compliant with 21 CFR 312.32 (IND safety reporting), 21 CFR 314.80 (postmarketing), and ICH E2A, with multi-jurisdictional overlays (EMA, PMDA, Health Canada). Covers seriousness/causality frameworks, expedited reporting timelines, roles, documentation standards, training mandates, and QA mechanisms. Use when drafting or updating an adverse event reporting policy, pharmacovigilance policy, AE/SAE reporting SOP, or safety reporting framework for a pharmaceutical company, CRO, biotech, or clinical research institution.

中文简介正在准备中。当前显示原文说明。

Drafts U.S. commercial real estate access and indemnity (right-of-entry) agreements for pre-closing due diligence. Covers license grants, non-invasive vs invasive testing gates, insurance/endorsement requirements, indemnity with discovery carve-outs, restoration and lien remedies, confidentiality, and anti-indemnity guardrails. Trigger: access agreement, right of entry, due diligence access, Phase I/II, invasive testing, pre-PSA site inspection.

中文简介正在准备中。当前显示原文说明。

Diagnoses and fixes CI failures and re-runs GitHub Actions jobs. Use when CI is failing, tests break in CI, lint errors block merging, a build fails, or jobs need re-running.

中文简介正在准备中。当前显示原文说明。

Check a change for performance regression against this machine's recorded baseline - decide whether the diff needs checking, run the deck benchmark under the hygiene wrapper, and attribute any regression to an element. Use before opening a PR that touches the simulation hot path.

中文简介正在准备中。当前显示原文说明。

Configure, build and test dynamic-neural-field-composer. Use whenever you need to compile the library, run the GoogleTest suite, verify a change builds, or reproduce a test failure.

中文简介正在准备中。当前显示原文说明。

Quicken the codebase — an ad-hoc performance audit that reveals what drags (N+1 queries, needless re-renders, missing caching, memory leaks, redundant computation, hot-path complexity) and prescribes the fix, surfaced inline in the session. Scoped to your current diff by default, or to a path/area you name. Use before a perf-sensitive merge, when something feels slow, or when you want a targeted optimization pass. Replaces the old always-on `optimize` daemon worker (alias: /perf-audit).

中文简介正在准备中。当前显示原文说明。

Add, edit, or audit guidance docs. Default writes guidance for Claude (.claude/guidance/, Markdown, moflo universal rules). -h writes for human readers (docs/, lighter ruleset). --html emits HTML with a minimal default stylesheet instead of Markdown. -a audits the .claude/guidance/ directory.

中文简介正在准备中。当前显示原文说明。

Reset an epic's test data — close PRs, delete branches, reopen issues, revert code

中文简介正在准备中。当前显示原文说明。

Schedule a moflo spell to run on the local machine via the moflo daemon (cron, interval, or one-time). Use when the user wants to schedule, automate, or recurringly run one of THEIR spells locally — e.g. "schedule the oap spell every hour", "run my audit spell every weekday at 9am", "fire X once tomorrow morning". This is the LOCAL daemon path. For remote Anthropic-cloud agents, use /schedule instead.

中文简介正在准备中。当前显示原文说明。

Consult the Eldar — audit a project's moflo + Claude Code setup for portable, high-leverage gaps and guide remediation. Default mode is read-only audit with severity-ranked findings; --fix presents an interactive triage menu and walks the user through each chosen fix (healer, missing CLAUDE.md, sparse guidance, hook/MCP wiring, empty memory namespaces, stack→guidance gaps). Use when starting in a new project, when Claude feels lost or inefficient, when guidance/CLAUDE.md is sparse, or as a periodic health check.

中文简介正在准备中。当前显示原文说明。

Alias for /ward — see that skill's description.

中文简介正在准备中。当前显示原文说明。

Ward the codebase — an ad-hoc test-gap audit that reveals unguarded code (untested functions, uncovered edge cases, missing error-handling and integration tests) and conjures ready-to-paste test skeletons as protective wards against regression, surfaced inline in the session. Scoped to your current diff by default, or to a path/area you name. Use before merging risky changes or when you suspect thin coverage. Replaces the old always-on `testgaps` daemon worker (alias: /test-gaps).

中文简介正在准备中。当前显示原文说明。

Bump version, build, test, publish to npm, and install locally

中文简介正在准备中。当前显示原文说明。

Alias for /quicken — see that skill's description.

中文简介正在准备中。当前显示原文说明。

Run moflo's Healer (`flo healer`, alias for `flo doctor`) from inside the Claude session. Audit-only by default; pass `--fix` to apply auto-repairs, `-c <component>` for a single check. Use when something feels off (missing moflo.yaml, daemon dead, statusline empty, hooks not firing) or as a periodic health check. Distinct from Claude Code's built-in `/doctor`, which diagnoses Claude Code itself, not moflo.

中文简介正在准备中。当前显示原文说明。

Detects usage of private Apple APIs, undocumented frameworks, and runtime introspection patterns that bypass the public SDK, enforcing Guideline 2.5.1. Private API usage causes automated binary rejection at upload.

中文简介正在准备中。当前显示原文说明。

Detects placeholder content, stub UI, hardcoded test credentials, and non-production endpoints that signal an incomplete app to reviewers under Guideline 2.1.

中文简介正在准备中。当前显示原文说明。

Detects over-broad permission requests where a narrower permission or privacy-preserving alternative API is sufficient, violating Guideline 5.1.1(iii) data minimization requirements.

中文简介正在准备中。当前显示原文说明。

Detects data collection patterns that exceed what is necessary for the app's stated functionality, enforcing Guideline 5.1.1(iii) data minimization requirements.

中文简介正在准备中。当前显示原文说明。