测试设计、漏洞检测、质量保证（1.3万 个）
Use this skill to examine RAM captures with Volatility, a memory analysis framework. It guides acquisition, process and network inspection, and artifact extraction for incident response or malware investigations, with workflows for Windows, Linux, and macOS dumps.
中文简介正在准备中。当前显示英语简介。
Plan JavaScript and TypeScript tests across unit, integration, and end-to-end levels. Get guidance for Jest, Vitest, and Testing Library, along with mocking, fixtures, test infrastructure, and test-driven or behavior-driven workflows.
中文简介正在准备中。当前显示英语简介。
Support defensive malware triage and incident response by identifying samples, guiding static and dynamic analysis, examining behavior, and extracting indicators of compromise (IOCs). The skill helps document findings and suggest detection or mitigation steps for authorized security work.
中文简介正在准备中。当前显示英语简介。
Review React, Vue, Angular, and browser JavaScript for cross-site scripting (XSS) risks. Identify unsafe HTML rendering, URL handling, and event patterns, then organize findings by severity with practical fixes, secure coding examples, and a prevention checklist.
中文简介正在准备中。当前显示英语简介。
Use this skill to plan authorized firmware security reviews for embedded devices. It covers ways to acquire and extract firmware, inspect filesystems and binaries, identify common security weaknesses, emulate software, and document findings with remediation guidance.
中文简介正在准备中。当前显示英语简介。
Plan GDPR-aligned data handling for systems that process personal data in the EU. Get practical guidance on consent management, data subject requests, privacy controls, and privacy-first architecture, including implementation patterns from the accompanying playbook when needed.
中文简介正在准备中。当前显示英语简介。
Use this skill to coordinate code reviewers with different specialties, such as security, architecture, performance, and code quality. It combines their findings, identifies conflicting recommendations, and produces a unified report with prioritized issues and improvement suggestions.
中文简介正在准备中。当前显示英语简介。
Implement and review client-side security measures in frontend code. Address cross-site scripting (XSS) with safe DOM handling and sanitization, and guide input validation, Content Security Policy, secure redirects, authentication storage, and browser security features.
中文简介正在准备中。当前显示英语简介。
Create end-to-end tests for important user journeys with Playwright or Cypress. Get guidance on stable selectors, test data, retries, tracing, and isolated runs, plus ways to run tests in CI and capture artifacts.
中文简介正在准备中。当前显示英语简介。
Use this skill to assess a code change or codebase across quality, architecture, security, performance, testing, and documentation. It organizes findings by priority and provides remediation guidance, with optional focus areas such as security, performance, or framework practices.
中文简介正在准备中。当前显示英语简介。
Review direct and transitive project dependencies for known vulnerabilities, license concerns, outdated packages, and supply chain risks. Get prioritized findings, upgrade options with compatibility notes, and practical remediation steps for a security report or maintenance plan.
中文简介正在准备中。当前显示英语简介。
Designs realistic mock APIs for frontend and integration development, tests, and demos. It helps define routes, response and error formats, authentication flows, latency, and state changes, with deterministic fixtures and guidance for running and switching scenarios.
中文简介正在准备中。当前显示英语简介。
Map an attacker’s goal into branches of possible attack paths, then annotate the paths with factors such as cost, skill, time, and detectability. Use the resulting tree to spot defense gaps, prioritize mitigations, and explain security risks.
中文简介正在准备中。当前显示英语简介。
Support authorized analysis of protected software by identifying obfuscation and anti-debugging techniques. The skill helps document findings and suggest defensive measures for malware analysis, security research, approved testing, and training exercises.
中文简介正在准备中。当前显示英语简介。
Audit web or mobile experiences against WCAG accessibility criteria. The skill combines automated scans with manual checks such as keyboard use, screen readers, focus order, and contrast, then maps barriers to user impact and gives remediation steps and retesting guidance.
中文简介正在准备中。当前显示英语简介。
Implement and review secure backend code, with guidance on validating inputs, protecting authentication and APIs, and preventing common vulnerabilities. It can also help secure database access, error handling, external requests, and security logging.
中文简介正在准备中。当前显示英语简介。
Review a project’s direct and transitive dependencies for known vulnerabilities, licensing concerns, supply-chain risks, and outdated packages. Get prioritized findings, upgrade options with compatibility notes, and practical remediation steps for a security report or follow-up plan.
中文简介正在准备中。当前显示英语简介。
Write unit tests for shell scripts with Bats, the Bash Automated Testing System. The skill covers test structure, helpers, fixtures, setup and teardown, and checks for exit codes, output, and side effects, including running the tests in CI pipelines.
中文简介正在准备中。当前显示英语简介。
Test local web applications with Python scripts using Playwright, a browser automation tool. Verify interface behavior, investigate problems, capture screenshots, and inspect browser logs, with a helper that manages one or more application servers.
中文简介正在准备中。当前显示英语简介。
Use test-driven development for features, bug fixes, refactoring, and behavior changes. Write a focused test first, confirm it fails for the expected reason, then implement the smallest change that passes and refactor while keeping tests green.
中文简介正在准备中。当前显示英语简介。
Test rule-enforcing skills with a RED-GREEN-REFACTOR cycle adapted from software testing. Run pressured scenarios without the skill, capture failures and rationalizations, then revise and retest the documentation to close loopholes.
中文简介正在准备中。当前显示英语简介。
Add new test files for critical business logic changed locally. By default, inspect uncommitted and untracked changes, or the latest commit when the working tree is clean. The workflow analyzes coverage needs and verifies tests without changing existing test files.
中文简介正在准备中。当前显示英语简介。
Choose and interpret coverage analyses for an existing test suite, including code structure, mutation testing, requirements traceability, and API integration. The reference explains what each signal measures, its blind spots, suitable uses, and cost considerations; coverage is not treated as proof of test quality.
中文简介正在准备中。当前显示英语简介。
Use this skill after business logic changes, refactoring, or dependency updates to identify failing tests and coordinate repairs. It aims to keep tests aligned with the current implementation while preserving their original purpose and checking the full suite again.
中文简介正在准备中。当前显示英语简介。