测试与安全技能

Automate detection, enrichment, and response playbooks for a SOC you operate. Keep humans in the loop for destructive actions.

中文简介正在准备中。当前显示原文说明。

Provides expert knowledge of the testing pyramid, test design principles, MockK patterns, and integration testing conventions for Spring Boot + Kotlin projects.

中文简介正在准备中。当前显示原文说明。

Analyze suspicious artifacts in an isolated lab to contain and recover. For incident responders on owned estates. Never write, improve, or distribute malware.

中文简介正在准备中。当前显示原文说明。

Provides expert knowledge of the testing pyramid, test design principles, MockK patterns, and integration testing conventions for Spring Boot + Kotlin projects.

中文简介正在准备中。当前显示原文说明。

Advise on defensive security for industrial control systems you operate. Safety first. No process-disruption guidance.

中文简介正在准备中。当前显示原文说明。

Audits Tailwind CSS usage ensuring mobile-first responsive utilities and clean classes.

中文简介正在准备中。当前显示原文说明。

Performs simple mutation testing to verify test coverage and assertions.

中文简介正在准备中。当前显示原文说明。

Review and harden web apps (authz, XSS, CSRF, SSRF, injection) on code you maintain. Complements the OWASP `security` skill. No exploit kits.

中文简介正在准备中。当前显示原文说明。

Harden iOS/Android apps you ship: storage, TLS pinning policy, IPC, and backend trust. You still enforce authz on the server.

中文简介正在准备中。当前显示原文说明。

Choose and review cryptographic usage in your codebase: TLS, hashing, KMS, secret storage. Prefer standard libraries and vetted constructions.

中文简介正在准备中。当前显示原文说明。

Harden IAM, storage, keys, and org policies in cloud accounts you administer. Focus on identity, logging, and public-exposure controls.

中文简介正在准备中。当前显示原文说明。

Improve detections, hardening, and response for the estate you defend. Detection-as-code and control design, not offense.

中文简介正在准备中。当前显示原文说明。

Audits Hibernate database interactions to prevent N+1 query problems in JVM apps.

中文简介正在准备中。当前显示原文说明。

Audit web pages for performance optimization following PageSpeed Insights guidelines. Use when analyzing page performance, optimizing web applications, reviewing performance metrics, implementing Core Web Vitals improvements, or when the user mentions page speed, performance optimization, Lighthouse scores, or Core Web Vitals.

中文简介正在准备中。当前显示原文说明。

Harden LLM and agent integrations you operate: prompt injection, tool allowlists, secret leakage, and supply-chain of models. Defensive only.

中文简介正在准备中。当前显示原文说明。

Web Performance Engineering — analyzes Core Web Vitals using the PageSpeed Insights API (PSI v5) and applies the 80/20 principle: identify the 20% of changes that produce 80% of the performance gain. Produces a prioritized markdown report with quantified estimates and framework-specific code. Trigger: When auditing page speed, analyzing Core Web Vitals, or optimizing web performance for any URL.

中文简介正在准备中。当前显示原文说明。

Query and interpret security logs you are authorized to read. Build detections and investigations without leaking PII.

中文简介正在准备中。当前显示原文说明。

Provides expert knowledge for building Django 5+ projects with UV as the package manager, domain-driven app structure, ruff for linting, and pytest-django for testing.

中文简介正在准备中。当前显示原文说明。

Testing patterns for multi-tenant Django POS projects using pytest-django, RequestFactory, and mocks. No factories, no complex conftest. Trigger: When writing or reviewing tests in any apps/ directory.

中文简介正在准备中。当前显示原文说明。

Coordinate containment, eradication, and recovery for an authorized incident. Preserve evidence, communicate facts, and avoid destructive actions without approval.

中文简介正在准备中。当前显示原文说明。

Build and configure Laravel 10+ applications, including creating Eloquent models and relationships, implementing Sanctum authentication, configuring Horizon queues, designing RESTful APIs with API resources, and building reactive interfaces with Livewire. Use when creating Laravel models, setting up queue workers, implementing Sanctum auth flows, building Livewire components, optimising Eloquent queries, or writing Pest/PHPUnit tests for Laravel features.

中文简介正在准备中。当前显示原文说明。

Use when building PHP applications with modern PHP 8.3+ features, Laravel, or Symfony frameworks. Invokes strict typing, PHPStan level 9, async patterns with Swoole, and PSR standards. Creates controllers, configures middleware, generates migrations, writes PHPUnit/Pest tests, defines typed DTOs and value objects, sets up dependency injection, and scaffolds REST/GraphQL APIs. Use when working with Eloquent, Doctrine, Composer, Psalm, ReactPHP, or any PHP API development.

中文简介正在准备中。当前显示原文说明。

Map controls to SOC2, ISO 27001, PCI, or internal policy for the org you work for. Evidence and control design — not audit theater.

中文简介正在准备中。当前显示原文说明。

Audits token storage mechanisms to prevent XSS-based JWT theft.

中文简介正在准备中。当前显示原文说明。