测试与安全技能

Use when deals must clear compliance gates: licensing, suitability, audit readiness, and regulated-ops checks before close.

中文简介正在准备中。当前显示原文说明。

Audit CRM fields by fill rate, format, and use, and propose keep, fix, or retire for each.

中文简介正在准备中。当前显示原文说明。

Set up compliance work from policies, system inventory, audit reports, approved answers, and counsel contacts.

中文简介正在准备中。当前显示原文说明。

Review a deal for evidence gaps across need, scope, stakeholders, process, competition, delivery, security, legal, and commercial approval.

中文简介正在准备中。当前显示原文说明。

Check cap-table records against signed source documents and report ownership, security, date, and total differences for expert review.

中文简介正在准备中。当前显示原文说明。

Performs security-focused differential review of code changes. Adapts analysis depth to codebase size, uses git blame for context, calculates blast radius by counting callers, checks test coverage of modified code, and generates a markdown report. Use when reviewing a PR, commit, or diff for security vulnerabilities, checking whether a change re-introduces a previously fixed bug, asking what else a change could break, or finding which modified code has no test covering it.

中文简介正在准备中。当前显示原文说明。

Use when an outsourced support vendor handles your customers: audit the queue, score the sample, calibrate the vendor, and lift capability with evidence.

中文简介正在准备中。当前显示原文说明。

Conventions for dependency injection and mocking in Spring Boot in this project. Use this whenever writing, reviewing, or refactoring integration test classes (anything annotated @SpringBootTest, or under src/test that talks to a real Spring context), especially when deciding how to wire dependencies or mock collaborators. Also consult this before adding @Autowired, @MockBean, @MockitoBean, or field injection in any test class.

中文简介正在准备中。当前显示原文说明。

Conventions for dependency injection and mocking in Spring Boot integration tests in this project. Use this whenever writing, reviewing, or refactoring integration test classes (anything annotated @SpringBootTest, or under src/test that talks to a real Spring context), especially when deciding how to wire dependencies or mock collaborators. Also consult this before adding @Autowired, @MockBean, @MockitoBean, or field injection in any test class.

中文简介正在准备中。当前显示原文说明。

Conventions for using parallelization in all tests using Jupiter

中文简介正在准备中。当前显示原文说明。

Conventions for using annotations in all tests using Jupiter

中文简介正在准备中。当前显示原文说明。

Expert knowledge of Kafka event streaming patterns in melosys-api. Use when: (1) Understanding Kafka producers and consumers, (2) Debugging Kafka message processing issues, (3) Understanding topic configuration and message schemas, (4) Investigating SkippableKafkaErrorHandler and error handling, (5) Understanding Aiven Kafka setup and security configuration.

中文简介正在准备中。当前显示原文说明。

Expert knowledge of bilateral social security agreements (trygdeavtaler) in melosys-api. Use when: (1) Understanding which countries have agreements with Norway, (2) Debugging Sakstyper.TRYGDEAVTALE processing, (3) Understanding lovvalgsbestemmelser for specific agreement countries, (4) Investigating TrygdeavtaleVedtakService and attestation generation, (5) Understanding differences between EU/EEA and bilateral agreement handling.

中文简介正在准备中。当前显示原文说明。

Expert knowledge of authentication and authorization patterns in melosys-api. Use when: (1) Understanding Azure AD/OIDC authentication, (2) Debugging Tilgangsmaskinen access control, (3) Understanding SubjectHandler and user context, (4) Configuring OAuth2 clients for service-to-service calls, (5) Understanding audit logging patterns.

中文简介正在准备中。当前显示原文说明。

Expert knowledge of EU/EEA social security coordination regulations in melosys-api. Use when: (1) Understanding EU Regulation 883/2004 and 987/2009 framework, (2) Understanding personal and material scope of coordination, (3) Understanding coordination principles (single legislation, lex loci laboris), (4) Understanding territorial scope (EU, EEA, Switzerland, UK), (5) Understanding the relationship between Sakstyper.EU_EOS and regulations, (6) Understanding how EESSI integrates with regulation procedures.

中文简介正在准备中。当前显示原文说明。

Expert knowledge of testing patterns and strategies in melosys-api. Use when: (1) Writing unit tests with JUnit 5 or Kotest, (2) Setting up integration tests with Testcontainers, (3) Understanding the test base classes and hierarchy, (4) Using ArchUnit for architecture tests, (5) Configuring embedded Kafka for testing, (6) Understanding mock patterns and test utilities, (7) Creating test data with the forTest DSL.

中文简介正在准备中。当前显示原文说明。

Drive Keel agent test-first or evidence-first execution for a selected OpenSpec task. Use when a task needs software tests, hardware testbench, assertions, lint, new behavior proof, regression coverage, or red/green evidence before implementation.

中文简介正在准备中。当前显示原文说明。

Use when a running Spark or DSH web service needs real-browser verification — page load, client-plugin boot errors, console errors, failed requests, or onboarding/dialog rendering — with the repository's own Playwright chromium.

中文简介正在准备中。当前显示原文说明。

Use when adding or repairing Spark regression tests for asynchronous ownership, cancellation, persistence, restart recovery, or cross-surface projections. Not a coverage campaign, performance benchmark, source-text policy check, or full delivery review.

中文简介正在准备中。当前显示原文说明。

このブランチ、またはこのセッションで書いた差分の全体を読み直し、用語の揺れ・古いまま残ったコメント・追従し損ねた実装 (呼び出し元・対になる箇所・テスト・文書) を探して、裏の取れたものを直す。「差分全体を見直して」「用語の揺れや更新漏れが無いか見て」「refresh-on-session」「/refresh-on-session」で発火。バグ探しは code-review、ディレクトリの文書と実体の一括照合は claude-md-refresh、issue 本文の書き戻しは issue-writeback の担当。

中文简介正在准备中。当前显示原文说明。

Audits what Claude may do (permission rules, hooks, MCP scope, an agent's grants) and maps what it reaches on disk. Trigger on audit my permissions, why was this allowed, what stalls a routine, swap an allow for a deny, is this hook safe, gate my git pushes, a guard hook or call cap, PowerShell twins of Bash denies, where a rule should live, what is eating my disk, where has Claude been, config drift from a repo copy, skills loading twice; or say /rw-gatewarden (audit, harden, explain, scan, hooks, capreview, layout, map, footprint, drift, loads, status, refresh). Installs are trustwarden's; tokens keywarden's; secrets shieldwarden's; standing config rigwright's; agent design agentwright's.

中文简介正在准备中。当前显示原文说明。

Runs image, video and audio generation on a local ComfyUI server and guards the GPU before long renders. Trigger to generate an image, video, audio or music locally; to run, test or check a ComfyUI workflow before a long or queued render; when a video render crashed the machine, ran out of memory or hung in VAE decode; to render while LM Studio holds the GPU; to run a pixelsmith brief locally; or say /rw-comfyrunner (audit, check, test, run, status). Refuses an untiled video decode and scores resolution times frames. Briefs and judging art are pixelsmith's; sound briefs soundsmith's; freeing LM Studio lmstudiorunner's; schedules agentwright's.

中文简介正在准备中。当前显示原文说明。

Runs Hyper-V VMs and Windows Sandbox. Trigger to create, start, stop, check or delete a VM (Gen2, secure boot, virtual TPM, settings proved); to take, list or restore a checkpoint; to test a plugin install on a clean machine from a golden checkpoint; to open a suspicious file or zip in a disposable sandbox with networking off; when Hyper-V says access denied; or say /rw-hypervrunner (audit, setup, vm, checkpoint, teardown, cleanroom, sandbox, status). Runs as a Hyper-V Administrators member, never self-elevated. Containers and WSL are dockerrunner's; whether code is trustworthy trustwarden's; secrets in returned files shieldwarden's.

中文简介正在准备中。当前显示原文说明。

Drives OBS Studio through its WebSocket, read-only by default, and turns recordings into clips, VOD cuts and chapters with FFmpeg. Trigger to audit an OBS setup; when a stream drops frames or lags; to switch a scene, mark a moment or save the replay buffer; to cut clips, burn in captions, normalize loudness or write chapters; to line a recorded playtest up with a game's log; when OBS shares a GPU; or say /rw-obsrunner (audit, check, set, mark, post, sheet, playtest, status, hold, release, refresh). Live work needs the user-installed obsws-python package. Never goes live, uploads or moderates chat. Caption files are whisperrunner's; thumbnails comfyrunner's; titles commscribe's; analytics duckrunner's.

中文简介正在准备中。当前显示原文说明。