测试设计、漏洞检测、质量保证（1.3万 个）
Benchmark CodeGraph retrieval quality on a real codebase by comparing agent behavior with vs without CodeGraph. Use when the user runs /agent-eval or asks to test, benchmark, audit, or validate a codegraph version (the local dev build or a published npm version) against a language's repo.
中文简介正在准备中。当前显示原文说明。
Cross-disease market sizing entry skill. Triggered by user one-liner like "做 X 市场调研" or "Run market sizing for X". Auto-runs 5 phase pipeline: contract → stratify → recall → compose-audit → bundle. Hard-gates on Cite-or-Block: every fact claim must carry citation anchor verifiable against sources/. Resumable mid-run.
中文简介正在准备中。当前显示原文说明。
Phase 4 Turn 2 of disease-market-sizing-orchestration (A6' upgrade). Audits compose output via Cite-or-Block strict — every anchor must reverse-resolve to an actual file in sources/, every fact claim must have an anchor. Returns verdict (ok/blocked) + violations list. Use AFTER cite-bound-content-generator (Turn 1), BEFORE report-bundle-builder (phase 5).
中文简介正在准备中。当前显示原文说明。
Add tree-sitter language support to codegraph end-to-end — wire the grammar + extractor, write tests, then benchmark extraction quality and retrieval value on 3 popular real-world repos. Use when the user runs /add-lang <language> or asks to add/support a new language (e.g. Lua, Elixir, Zig, OCaml) in codegraph.
中文简介正在准备中。当前显示原文说明。
Use when work produces a deliverable, factual claim, dataset, code change, decision, publication, deployment, automation, or irreversible action whose failure would matter; when the user asks for a quality gate, acceptance criteria, QA, completeness, validation, audit, evidence, preflight, release readiness, or a definition of done; or before claiming completion on medium- or high-risk work. Automatically decide whether a formal gate is warranted, derive task-specific pass/fail criteria, gather evidence, and block unsupported completion. Make sure to use this skill even when the user does not say "quality gate" if consequential work needs acceptance criteria or completion evidence. Skip formal gating for trivial, reversible, low-impact requests.
中文简介正在准备中。当前显示原文说明。
All animation knowledge for HyperFrames — atomic motion rules, multi-phase scene blueprints, scene transitions, broader motion-design techniques, AND the seven runtime adapters (GSAP default, plus Lottie, Three.js, Anime.js, CSS keyframes, Web Animations API, TypeGPU). Use for any motion or animation task: pick 2-4 rules and compose, or load a blueprint, or look up runtime-specific API (e.g. GSAP eases / Lottie player / Three.js mixer). Also covers auditing an existing composition's choreography (animation map) and 24 named text-animation effects. HyperFrames-native: single paused timeline, seek-safe, deterministic.
中文简介正在准备中。当前显示原文说明。
Use when the user wants to design, redesign, shape, critique, audit, polish, clarify, distill, harden, optimize, adapt, animate, colorize, extract, or otherwise improve a frontend interface. Covers websites, landing pages, dashboards, product UI, app shells, components, forms, settings, onboarding, and empty states. Handles UX review, visual hierarchy, information architecture, cognitive load, accessibility, performance, responsive behavior, theming, anti-patterns, typography, fonts, spacing, layout, alignment, color, motion, micro-interactions, UX copy, error states, edge cases, i18n, and reusable design systems or tokens. Also use for bland designs that need to become bolder or more delightful, loud designs that should become quieter, live browser iteration on UI elements, or ambitious visual effects that should feel technically extraordinary. Not for backend-only or non-UI tasks.
中文简介正在准备中。当前显示原文说明。
Design, review, and diagnose tests and fixtures that can fail nondeterministically under CI concurrency, shared host resources, clocks, process-global state, subprocesses, network listeners, or asynchronous teardown. Use when adding or changing tests with those risks, investigating flaky CI, or reviewing test isolation; use pre-push-checks separately to select outgoing commands.
中文简介正在准备中。当前显示原文说明。
Create new skills, modify and improve existing skills, and measure skill performance. Use when users want to create a skill from scratch, edit, or optimize an existing skill, run evals to test a skill, benchmark skill performance with variance analysis, or optimize a skill's description for better triggering accuracy.
中文简介正在准备中。当前显示原文说明。
Manage Agent Skills across Codex, Claude Code, local/global/project roots, Skill Hubs, GitHub, skills.sh, and managed plugin caches. Use when searching, installing, updating, upgrading, syncing, merging, auditing, deduplicating, cleaning, packaging, publishing, validating, resolving upstream sources, choosing runtime or scope, or working with skill-upgrade, check_upstreams.ps1, Claude Code plugins, skills-lock.json, or skill-upstreams.json. Do not use for ordinary software-package upgrades or non-skill file cleanup.
中文简介正在准备中。当前显示原文说明。
Assess AWS, Azure, and GCP controls for IAM escalation and cloud service exposure.
中文简介正在准备中。当前显示原文说明。
Test APIs against OWASP API Security Top 10 including discovery, auth abuse, and protocol-specific checks.
中文简介正在准备中。当前显示原文说明。
Test egress and DLP controls using synthetic canary data across authorized exfiltration channels.
中文简介正在准备中。当前显示原文说明。
Define legal scope, rules of engagement, and authorization artifacts for downstream pentest execution.
中文简介正在准备中。当前显示原文说明。
Systematically test authorized targets for SQL, XSS, SSTI, XXE, command, and request-smuggling injection classes.
中文简介正在准备中。当前显示原文说明。
Set up authorized C2 simulation workflows and measure defensive detection outcomes.
中文简介正在准备中。当前显示原文说明。
Test Docker and Kubernetes security controls for RBAC abuse, breakout, and secret exposure.
中文简介正在准备中。当前显示原文说明。
Map application security findings to OWASP Top 10 categories and generate remediation checklists. Use for normalized AppSec review outputs and category-level prioritization.
中文简介正在准备中。当前显示原文说明。
Prioritize vulnerability remediation using KEV-style exploitation context plus asset criticality. Use for CVE triage, patch order decisions, and remediation reporting.
中文简介正在准备中。当前显示原文说明。
Aggregate findings and generate multi-format pentest reports with remediation roadmap and risk scoring.
中文简介正在准备中。当前显示原文说明。
Correlate scanner results with CVE and exploit intelligence and prioritize by CVSS and exploitability.
中文简介正在准备中。当前显示原文说明。
Assess web applications against OWASP WSTG and OWASP Top 10 with reproducible evidence capture.
中文简介正在准备中。当前显示原文说明。
Evaluate authorized wireless networks for handshake, PMKID, rogue AP, and enterprise auth weaknesses.
中文简介正在准备中。当前显示原文说明。
Assess lateral movement and pivot paths across authorized internal trust boundaries.
中文简介正在准备中。当前显示原文说明。