测试与安全技能

You are an API mocking expert specializing in realistic mock services for development, testing, and demos. Design mocks that simulate real API behavior and enable parallel development.

中文简介正在准备中。当前显示原文说明。

Automated end-to-end UI testing and verification on an Android Emulator using ADB.

中文简介正在准备中。当前显示原文说明。

API security testing workflow for REST and GraphQL APIs covering authentication, authorization, rate limiting, input validation, and security best practices.

中文简介正在准备中。当前显示原文说明。

AUTHORIZED USE ONLY: This skill contains dual-use security techniques. Before proceeding with any bypass or analysis: > 1.

中文简介正在准备中。当前显示原文说明。

Implement secure API design patterns including authentication, authorization, input validation, rate limiting, and protection against common API vulnerabilities

中文简介正在准备中。当前显示原文说明。

XML-specified Android UI journey testing, interactive step execution, assertion verification, and JSON outcome reporting.

中文简介正在准备中。当前显示原文说明。

Build production Apache Airflow DAGs with best practices for operators, sensors, testing, and deployment. Use when creating data pipelines, orchestrating workflows, or scheduling batch jobs.

中文简介正在准备中。当前显示原文说明。

Testing and benchmarking LLM agents including behavioral testing, capability assessment, reliability metrics, and production monitoring—where even top agents achieve less than 50% on real-world benchmarks

中文简介正在准备中。当前显示原文说明。

Find and fix WCAG 2.2 accessibility issues. Two modes — report (sweep a codebase or page, produce a prioritized written report, no edits) and fix (audit→edit→verify loop on a target). Prefers direct-CDP live-DOM auditing; falls back to a browser-MCP composition or HTML-string audits.

中文简介正在准备中。当前显示原文说明。

You are an accessibility expert specializing in WCAG compliance, inclusive design, and assistive technology compatibility. Conduct audits, identify barriers, and provide remediation guidance.

中文简介正在准备中。当前显示原文说明。

Provide comprehensive techniques for attacking Microsoft Active Directory enprojectnments. Covers reconnaissance, credential harvesting, Kerberos attacks, lateral movement, privilege escalation, and domain dominance for red team operations and penetration testing.

中文简介正在准备中。当前显示原文说明。

Security audit, hardening, threat modeling (STRIDE/PASTA), Red/Blue Team, OWASP checks, code review, incident response, and infrastructure security for any project.

中文简介正在准备中。当前显示原文说明。

Audit a live page for accessibility issues, locate each WCAG violation precisely, and return a selector-grounded fix worklist without editing.

中文简介正在准备中。当前显示原文说明。

Structured guide for setting up A/B tests with mandatory gates for hypothesis, metrics, and execution readiness.

中文简介正在准备中。当前显示原文说明。

Autonomous DevSecOps & FinOps Guardrails. Orchestrates Gemini 3 Flash to audit Linux Kernel patches, Terraform cost drifts, and K8s compliance.

中文简介正在准备中。当前显示原文说明。

Audit local AI coding-agent sessions with agenttrace for cost, tool failures, latency, anomalies, health, diffs, and CI gates.

中文简介正在准备中。当前显示原文说明。

6 production-ready AI engineering workflows: prompt evaluation (8-dimension scoring), context budget planning, RAG pipeline design, agent security audit (65-point checklist), eval harness building, and product sense coaching.

中文简介正在准备中。当前显示原文说明。

Audits GitHub Actions workflows for security vulnerabilities in AI agent integrations including Claude Code Action, Gemini CLI, OpenAI Codex, and GitHub AI Inference. Detects attack vectors where attacker-controlled input reaches. AI agents running in CI/CD pipelines.

中文简介正在准备中。当前显示原文说明。

Diff a live page's accessibility violations against a baseline — by default compares uncommitted changes (stash-based), or pass --branch [<name>] to diff against a branch. Reports only new violations introduced, violations fixed, and pre-existing count. Use `scan` for a full audit with no diffing.

中文简介正在准备中。当前显示原文说明。

依存パッケージ（Go modules / npm / Terraform provider / GitHub Actions / pre-commit 等）の アップグレードを、outdated 検出 → CHANGELOG・破壊的変更の確認 → 更新 → lint/test 検証 → コミットまで一連の手順で安全に適用する。「依存更新」「パッケージを上げて」「dependency update」 「go get -u」「npm update」「provider を上げる」等に言及されたときに使用する。

中文简介正在准备中。当前显示原文说明。

コード変更をセキュリティ・パフォーマンス・正確性・変更容易性の4観点から並列レビューし、統合レポートを出力する。 小〜中規模の変更を素早くチェックしたいときに使う。 大きなPRや複雑な変更を丁寧にレビューしたい場合は /review-scan を使う。

中文简介正在准备中。当前显示原文说明。

5〜10 分のプレゼン資料を Marp（Markdown）で作成し、PDF / PPTX / HTML に書き出す。 会話やリポジトリの実状況からスライドを起こし、clean テーマの雛形で下書き → docs/slides/slug/YYYY-MM-DD_slug.md に保存 → 文字量と画像の lint → 初見の読み手テスト（cold read）→ PNG で崩れを確認 → 初見の人の目が行く所のテスト（glance test）→ 描画する。 「プレゼン資料を作りたい」「スライド」「発表資料」「Marp」「Google スライド用の pptx」 などに言及されたときに使用する。

中文简介正在准备中。当前显示原文说明。

Review a GitHub pull request from multiple perspectives in parallel, output only findings, then let the user pick which to fix in the same session. Use when the user asks to review a PR by number, mentions "PRレビュー" / "PR review" with a number, or invokes `/pr-review <number>`. Fans out subagents for absolute-rules, stop-slop, security, architecture, code-quality, testing, and ai-antipattern.

中文简介正在准备中。当前显示原文说明。

Wait N seconds (default 20) via a blocking Node.js timer, for testing

中文简介正在准备中。当前显示原文说明。