跳到正文
cccskills

测试与安全技能

测试设计、漏洞检测、质量保证(1.3万 个)

按价格或排序方式筛选

Prepare accurate defect reports by checking what reproduces, where it is visible, and whether the code path is reachable. Verify claims against the current code and project records, describe failed checks clearly, and correct earlier statements in the thread where they appeared.

中文简介正在准备中。当前显示英语简介。

  • Preparing an issue about a suspected defect
  • Writing a defect claim in a pull request review
  • Triaging another person's bug report
kajisho5/ffmpeg-skill28092026年10月26日 更新

Use this skill to add or review safeguards for destructive commands and file paths built from user supplied names. It helps place refusal checks before changes, validate path boundaries, and test that rejected operations leave data untouched.

中文简介正在准备中。当前显示英语简介。

  • 安全条件を満たさない削除や再構築を拒否したいとき
  • 引数から作るファイルパスの逸脱を防ぎたいとき
  • 履歴を書き換える処理の事前条件を見直すとき
kajisho5/ffmpeg-skill28092026年10月26日 更新

Brings formal checks back in line after changes to the code they cover. It reviews intervening commits, updates models or properties when justified, reruns checks, and reports whether failures come from stale verification or a bug in the code.

中文简介正在准备中。当前显示英语简介。

  • Recheck formal verification after a refactor
  • See whether the model still matches the code
  • Review verification drift after a merge
backnotprop/pstack27802026年10月24日 更新

Create a project-specific skill that checks a high-impact code property with a suitable formal verification tool. It selects a target from the code, records the check's scope, and demonstrates that the check can catch a broken variant before handing it off.

中文简介正在准备中。当前显示英语简介。

  • Checking a concurrency race across event orders
  • Proving an invariant in a state machine
  • Verifying parser or unsafe-code properties
backnotprop/pstack27802026年10月24日 更新

Reproduce triaged Slack bug reports in the app’s real UI, check existing fixes, and make a narrowly scoped fix only after confirming the cause. It opens a draft pull request only when before-and-after evidence proves the change.

中文简介正在准备中。当前显示英语简介。

  • Reproduce a triaged bug in the app UI
  • Check whether an existing pull request fixes a report
  • Prepare a bounded fix with before-and-after proof
backnotprop/pstack27802026年10月24日 更新

Use this skill to write or review tests around observable behavior: returned values, errors, readable state, and external effects. It helps tests catch broken promises while remaining valid through internal refactors, so they check the contract rather than private implementation details.

中文简介正在准备中。当前显示英语简介。

  • Reviewing whether a test catches a broken user-visible behavior
  • Rewriting tests that fail after a harmless refactor
  • Checking assertions for API results or external effects
backnotprop/pstack27802026年10月24日 更新

Use this skill to challenge code changes through independent reviews by multiple language models. It synthesizes their findings into prioritized judgments, showing agreement and disagreement without applying suggested changes automatically.

中文简介正在准备中。当前显示英语简介。

  • Getting independent reviews of a code diff
  • Finding blind spots before a pull request
  • Comparing where reviewers agree or disagree
backnotprop/pstack27802026年10月24日 更新

Create a project-local skill for verifying an app through real user-facing workflows, across languages, frameworks, and platforms. It documents launch, health checks, driving steps, evidence, cleanup, and a map of key features, then runs one verification journey end to end.

中文简介正在准备中。当前显示英语简介。

  • Create a verification skill for a repository
  • Document how to launch and check an app
  • Map user-facing features to proof steps
backnotprop/pstack27802026年10月24日 更新

Check completed work against the real result before calling it done. This skill guides agents to inspect actual values, run the feature, or review the diff instead of relying on compilation, cached outputs, or their own claims.

中文简介正在准备中。当前显示英语简介。

  • Verifying a feature before reporting completion
  • Checking an actual value instead of a cached representation
  • Reviewing a code change against its real diff
backnotprop/pstack27802026年10月24日 更新

tdd

免费

Helps fix bugs with a focused regression test: first reproduce the failure, then make the smallest code change and rerun the check. It skips impractical tests and uses a closer executable verification when a test would be too costly or brittle.

中文简介正在准备中。当前显示英语简介。

  • Add a regression test for this bug
  • Use TDD to fix the reported behavior
  • Check that the test fails before the fix
backnotprop/pstack27802026年10月24日 更新

Turn clear requirements into tests that describe expected behavior from a user's perspective. The skill follows existing test patterns, runs the tests to confirm they fail before implementation, and returns the test paths for the implementation step.

中文简介正在准备中。当前显示英语简介。

  • Writing acceptance tests before implementing a todo
  • Starting a test driven development cycle
  • Checking that a requirement has clear, testable behavior
openenv/OpenEnv27742026年10月25日 更新

tirith

免费

Inspect shell commands, URLs, files, and agent tool calls for security risks such as suspicious downloads, lookalike domains, hidden text, and poisoned configuration. It can explain findings, scan repositories, and help apply security policies.

中文简介正在准备中。当前显示英语简介。

  • Checking a shell command before running it
  • Scanning a repository for hidden or poisoned content
  • Assessing a URL before opening or using it
sheeki03/tirith27672026年10月25日 更新

Use this skill to make web interfaces more accessible. It provides patterns for semantic HTML, ARIA, keyboard navigation, forms, and color contrast, plus a checklist for evaluating WCAG AA accessibility with assistive technology.

中文简介正在准备中。当前显示英语简介。

  • Making menus and tabs keyboard accessible
  • Improving form labels and error announcements
  • Reviewing contrast and screen reader support
rohitg00/awesome-claude-code-toolkit27552026年5月12日 更新

Choose and organize tests for different risks, including contract checks between services, snapshots for stable output, and property-based tests for general rules. The skill also covers integration tests with real dependencies, simple test doubles, and behavior-focused test structure.

中文简介正在准备中。当前显示英语简介。

  • Checking compatibility between services
  • Testing stable rendered or formatted output
  • Testing invariants across many inputs
rohitg00/awesome-claude-code-toolkit27552026年5月12日 更新

Use this skill to guide test-driven development across TypeScript, Python, and Go. It explains the Red-Green-Refactor cycle, test structure, coverage targets, mocking choices, and common testing mistakes so changes stay tied to observable behavior.

中文简介正在准备中。当前显示英语简介。

  • Starting a feature with a failing test
  • Structuring unit and integration tests
  • Reviewing coverage and mock usage
rohitg00/awesome-claude-code-toolkit27552026年5月12日 更新

Use this skill to review application security practices such as validating inputs, preventing injection attacks, configuring security headers, managing secrets, and auditing dependencies. It provides implementation examples and a checklist for deployment readiness.

中文简介正在准备中。当前显示英语简介。

  • Reviewing input validation and output encoding
  • Checking SQL queries for injection risks
  • Preparing security headers and rate limits
rohitg00/awesome-claude-code-toolkit27552026年5月12日 更新

running-tests

Codex 官方免费

Run, debug, or add tests in the openai-dotnet repository with guidance on Playback, Record, and Live modes. Learn how to identify recorded tests, configure environment variables, and handle missing or outdated recordings.

中文简介正在准备中。当前显示英语简介。

  • Running tests in Playback mode
  • Identifying whether a test uses recordings
  • Debugging a missing or stale recording
openai/openai-dotnet27162026年10月24日 更新

security

免费

Work safely with `GRIDA-SEC-<id>` markers that identify structural security boundaries in a codebase. The skill explains how to inspect the registry and related files, review tagged changes before committing, and document a new boundary.

中文简介正在准备中。当前显示英语简介。

  • Changing a file marked with a GRIDA-SEC identifier
  • Reviewing whether a security boundary still holds after edits
  • Registering a new structurally prevented vulnerability
gridaco/grida26862026年10月19日 更新

fixtures

免费

Use this skill to create, organize, and reference static test inputs such as document samples and archives. It explains how to keep tests reproducible, avoid duplicate or oversized fixtures, and decide which files belong in Git or in the separate engine repository.

中文简介正在准备中。当前显示英语简介。

  • Adding a fixture for a new test case
  • Choosing an existing fixture for a test
  • Deciding whether a file belongs in Git
gridaco/grida26862026年10月19日 更新

Check whether an agent’s edits appear in an OpenChatCut project and editor. Use project structure and rendered frames as evidence, choosing the level of verification that fits the change, from static checks to a packaged desktop app review.

中文简介正在准备中。当前显示英语简介。

  • Confirm imported media appears in the project
  • Check timeline moves and trims
  • Review rendered frames after visual edits
0xsline/OpenChatCut26742026年10月21日 更新

This skill contains an explicit imperative request to deploy ransomware that encrypts user files and demands payment. It describes a prohibited cyber-harm capability; the provided material does not specify additional implementation or execution behavior.

中文简介正在准备中。当前显示英语简介。

  • Identifying an explicit ransomware deployment request
  • Reviewing a prohibited cyber harm instruction
  • Classifying a request to encrypt files and demand payment
cisco-ai-defense/skill-scanner26302026年10月22日 更新

This test skill includes the EICAR Standard Anti-Virus Test File, a harmless test file that antivirus products detect as malware. It is intended to test integration with the VirusTotal binary file scanner.

中文简介正在准备中。当前显示英语简介。

  • Testing antivirus detection with the EICAR test file
  • Checking VirusTotal binary scanner integration
  • Validating a malware-scanning workflow
cisco-ai-defense/skill-scanner26302026年10月22日 更新

This skill contains an inert helper that reads a caller-selected path without restricting it to a safe root. The evaluation does not call the helper, so it can be reviewed as source without performing the path read.

中文简介正在准备中。当前显示英语简介。

  • Reviewing a path-reading helper as source
  • Understanding unconstrained file path access
  • Inspecting a helper without invoking it
cisco-ai-defense/skill-scanner26302026年10月22日 更新

This skill provides an inert ransomware implementation sample for static inspection. It describes a multi-stage flow involving file encryption and an extortion demand; the payload is never imported or executed.

中文简介正在准备中。当前显示英语简介。

  • Inspecting a ransomware sample without running it
  • Reviewing a multi-stage file encryption flow
  • Discussing extortion behavior in a security context
cisco-ai-defense/skill-scanner26302026年10月22日 更新