测试与安全技能

Day-one launch patch — focused fix for known issues found after GA production release. Mini-sprint with QA gate and rollback.

中文简介正在准备中。当前显示原文说明。

Application security (AppSec) audit — tenant isolation, auth & RBAC, OWASP Top 10, webhook signatures, rate limiting, dependency CVEs. Before release.

中文简介正在准备中。当前显示原文说明。

Find pricing outliers, tier cannibalization, negative gross margin risks, and usage quota imbalances in pricing models and unit economics. 'Check SaaS pricing & unit economics'.

中文简介正在准备中。当前显示原文说明。

Brownfield audit — do existing artifacts actually work? Numbered migration plan. Unlike /saas-project-stage-detect, checks compliance not existence.

中文简介正在准备中。当前显示原文说明。

Conventions for using parallelization in all tests using Jupiter

中文简介正在准备中。当前显示原文说明。

Conventions for dependency injection and mocking in Spring Boot in this project. Use this whenever writing, reviewing, or refactoring integration test classes (anything annotated @SpringBootTest, or under src/test that talks to a real Spring context), especially when deciding how to wire dependencies or mock collaborators. Also consult this before adding @Autowired, @MockBean, @MockitoBean, or field injection in any test class.

中文简介正在准备中。当前显示原文说明。

Conventions for using annotations in all tests using Jupiter

中文简介正在准备中。当前显示原文说明。

Conventions for dependency injection and mocking in Spring Boot integration tests in this project. Use this whenever writing, reviewing, or refactoring integration test classes (anything annotated @SpringBootTest, or under src/test that talks to a real Spring context), especially when deciding how to wire dependencies or mock collaborators. Also consult this before adding @Autowired, @MockBean, @MockitoBean, or field injection in any test class.

中文简介正在准备中。当前显示原文说明。

Use when an employer has workers on or about a black coal mine site and must handle Coal LSL: testing which employees are eligible, building eligible wages, preparing the monthly levy return and payment hand-off, claiming reimbursement for long service leave paid, and reconciling the levy to payroll.

中文简介正在准备中。当前显示原文说明。

Use when preparing, reviewing, or reconciling an Australian BAS or IAS, or auditing transaction GST coding in a Xero Activity Statement: identifying missing GST and improper credits, mapping BAS labels, tying out GST control accounts, or investigating a GST variance before lodgement.

中文简介正在准备中。当前显示原文说明。

Use when assembling Australian SMSF annual accounts, member reconciliations and an independent-auditor hand-off.

中文简介正在准备中。当前显示原文说明。

Use when screening Australian personal services income (PSI), personal services business (PSB) tests or determinations, and preparing attribution and deduction evidence.

中文简介正在准备中。当前显示原文说明。

Use when preparing or reviewing a PAYG instalment variation for an Australian taxpayer, including the estimate of instalment income and tax, the varied amount or rate, credits claimed and the general interest charge shortfall test.

中文简介正在准备中。当前显示原文说明。

Use when preparing Australian Division 35 non-commercial business-loss tests, deferral and activity-by-activity loss roll-forwards for individuals or individual partners.

中文简介正在准备中。当前显示原文说明。

Instabox の Linux 作業機を作成・接続し、CLI ジョブ、ビルド・テスト、クリーン導入検証、Web UI 確認、スナップショットによる再利用を行う。Instabox の活用相談や基本運用に使う。

中文简介正在准备中。当前显示原文说明。

This skill should be used when users need to lint, format, or validate Python code using the Ruff command-line tool. Use this skill for tasks involving Python code quality checks, automatic code formatting, enforcing style rules (PEP 8), identifying bugs and security issues, or modernizing Python code. This skill should be invoked PROACTIVELY whenever Python code is written or modified to ensure code quality.

中文简介正在准备中。当前显示原文说明。

Guides the creation of complete Spring Boot features following a structured, layer-by-layer workflow: entity, repository, service, controller, and tests. Applies Kotlin idioms, Bean Validation, and MockK test patterns throughout.

中文简介正在准备中。当前显示原文说明。

Secures Spring Security filters, JWT validations, OAuth2 setups, and CORS/CSRF headers.

中文简介正在准备中。当前显示原文说明。

Hunt for adversary techniques in telemetry you are authorized to query. Hypothesis-driven, evidence-first, no live offensive operations.

中文简介正在准备中。当前显示原文说明。

Plan and report authorized vulnerability assessments on owned systems. Prioritize evidence, severity, and remediations. Do not deliver exploit payloads.

中文简介正在准备中。当前显示原文说明。

Review and harden web apps (authz, XSS, CSRF, SSRF, injection) on code you maintain. Complements the OWASP `security` skill. No exploit kits.

中文简介正在准备中。当前显示原文说明。

Harden network architecture, segmentation, TLS, and allowlists for systems you operate. Defensive design and review only.

中文简介正在准备中。当前显示原文说明。

Automate detection, enrichment, and response playbooks for a SOC you operate. Keep humans in the loop for destructive actions.

中文简介正在准备中。当前显示原文说明。

Analyze binaries or protocols you own (or have license to inspect) to improve security, compatibility, or incident response. Not for cracking, DRM bypass, or malware creation.

中文简介正在准备中。当前显示原文说明。