测试与安全 Skills - 测试与安全 Agent Skills推荐与安装 - 第54页 - AI导哈

pytest-patternsmanutej/luxor-c…ketplacePython testing with pytest covering fixtures, parametrization, mocking, and test organization for reliable test suites857 tdd-test-writeram-will/codex-skillsWrites failing tests first for test-driven development and hands off a strict implementation contract that requires agents to make those tests pass without weakening the tests. Use when users ask for test-first workflows, RED/GREEN cycles, or behavior-gating tasks with automated tests.857 repo-security-posturesuperagent-ai/skillsAudit a GitHub repository's security posture and hardening gaps across branch protection, CODEOWNERS, GitHub Actions, publish/release integrity, collaborator access, security features, and dependency review. Use when reviewing or hardening a repo, assessing GitHub configuration, checking CI/CD or Actions security, evaluating supply-chain posture, preparing maintainer-facing security todos, or when the user says "repo security posture", "audit my repo", "harden this GitHub repo", "actions security", "protect against a compromised maintainer", or points at a GitHub URL and asks what to fix.856 post-patch-validationtrailofbits/skillsValidates security patches with reproducible baseline-versus-patched evidence, including original exploits, root-cause variants, behavior preservation, regressions, and newly introduced security failures. Use after a patch exists and before accepting, merging, or reporting it as fixed; also use when an AI-generated patch, remediation commit, pull request, or proposed upstream fix needs adversarial post-patch validation across any language.856 ss-lintbitjaru/styleseedQuick automated lint — detects common design system violations in seconds855 geo-platform-optimizerzubair-trabzada/geo-seo-claudePlatform-specific AI search optimization — audit and optimize for Google AI Overviews, ChatGPT, Perplexity, Gemini, and Bing Copilot individually854 malware-detection-and-reportingreason-machines/security-skillsIdentify, analyze, and report malicious software distribution repositories masquerading as legitimate security tools854 malware-repository-warningreason-machines/security-skillsWARNING - This repository appears to distribute cracked/pirated security software and potential malware853 drupal-securitymadsnorgaard/dr…esourcesDrupal security expertise. Auto-activates when writing forms, controllers, queries, or handling user input. Prevents XSS, SQL injection, and access bypass vulnerabilities.852 geo-reportzubair-trabzada/geo-seo-claudeGenerate a professional, client-facing GEO report combining all audit results into a single deliverable with scores, findings, and prioritized actions850 create-prn8n-io/n8nCreates GitHub pull requests with properly formatted titles that pass the check-pr-title CI validation. Use when creating PRs, submitting changes for review, or when the user says /pr or asks to create a pull request.847 security-compliancedavila7/claude-…emplatesGuides security professionals in implementing defense-in-depth security architectures, achieving compliance with industry frameworks (SOC2, ISO27001, GDPR, HIPAA), conducting threat modeling and risk assessments, managing security operations and incident response, and embedding security throughout the SDLC.847 plannotator-reviewbacknotprop/plannotatorOpen Plannotator's browser-based code review UI for the current worktree, another directory, or a pull request URL, then act on the feedback that comes back.847 android-testingnew-silvermoon/…t-skillsComprehensive testing strategy involving Unit, Integration, Hilt, and Screenshot tests.846 nemoclaw-user-configure-securitynvidia/skillsPresents a risk framework for every configurable security control in NemoClaw. Use when evaluating security posture, reviewing sandbox security defaults, or assessing control trade-offs. Trigger keywords - nemoclaw security best practices, sandbox security controls risk framework, nemoclaw credential storage, openshell provider, api key security, openclaw security controls, nemoclaw security boundary, prompt injection, tool access control.845 ce-dogfoodeveryinc/compou…g-pluginHands-off, diff-scoped browser QA of the active branch: maps user flows, drives a real browser, autonomously fixes small breakages with regression tests and commits, judges experience against product personas, and writes a durable dogfood report. Manual invocation only.845 vibeboshu2/agentopsValidate code readiness. Use when: doing a quick readiness or sanity check that code is ready to commit or ship, short of a full review.845 security-pen-testingalirezarezvani/…e-skillsUse when the user asks to perform security audits, penetration testing, vulnerability scanning, OWASP Top 10 checks, or offensive security assessments. Covers static analysis, dependency scanning, secret detection, API security testing, and pen test report generation.845 sumeru-reviewxindoo/sumeru小说逻辑/剧情审查，适用于用户说"帮我检查下小说有没有bug"、"看看时间线有没有矛盾"、"人物有没有OOC"、"找剧情前后冲突"、"梳理伏笔有没有回收"、"检查小说剧情合理性"、"看看有没有剧情漏洞"、"人物行为不符合性格"、"检查时间线对不对"、"找小说前后矛盾的地方"、"帮我梳理所有伏笔"、"小说剧情bug检查"、"逻辑漏洞排查"等需求，检测时间线冲突、逻辑漏洞、人物OOC、伏笔遗漏等问题，**执行字数检查确保章节字数达标**，**生成详细问题清单并自动修复所有问题，修复结果直接修改 chapters/ 目录，修改前自动备份到 .sumeru/write/original/**，**发现严重问题时自动修订大纲并重写对应章节**，**底线问题零遗漏机制确保所有致命问题必须解决**，**批量审查时使用子Agent并行处理，每个Agent最多负责3个章节**843 spring-bootmindrally/skillsExpert guidance for Spring Boot application development with best practices for RESTful APIs, testing, security, and deployment843 testingmindrally/skillsGeneral testing best practices and guidelines for writing comprehensive, maintainable tests across different testing frameworks and languages.842 production-gradea-tokyo/agent-skillsPrinciple-engineering posture for production-grade code: reads the repo first, plans before code, matches conventions, pulls latest docs over training recall, and ships the simplest correct change that holds the bar — proper algorithms and data structures, idempotent writes, schema+queries+indexes as one artefact, typed errors, tests in the same diff. Substrate-agnostic; defers to peer skills on their lanes. Use for non-trivial planning, design, implementation, review, or refactoring; RCA and debugging; performance and optimization work; changes touching a database schema, security, infrastructure, or a public API; hardening inherited, vibe-coded, or LLM-generated code (dependency/CVE and migration audits); and over-engineering cleanup ("simplest solution," "YAGNI," "what can we delete").842 solidity-auditorpashov/skillsSecurity audit of Solidity code while you develop. Trigger on "audit", "check this contract", "review for security", "loop mode", "run the auditor in loop mode", "run 3 passes". Modes - default (full repo) or a specific filename. Loop mode runs several passes in one scan, each pass told what the earlier ones found, and ends in one combined report; it remembers findings between scans in a ledger.841 woocommercemindrally/skillsWordPress and WooCommerce development guidelines with PHP best practices, security standards, and extensibility patterns841 neo4j-security-skillneo4j-contrib/n…j-skillsProgrammatic security management in Neo4j — RBAC/ABAC, user lifecycle (CREATE/ALTER/DROP USER), role lifecycle (CREATE/GRANT ROLE/DROP ROLE), privilege grants and denies (GRANT/DENY/REVOKE on graph, database, DBMS), property-level access control, sub-graph access control, SHOW PRIVILEGES inspection, and auth provider config reference (LDAP, OIDC/SSO). Use when an agent needs to manage users, roles, or privileges programmatically via Cypher on the system database. Does NOT handle Cypher query writing — use neo4j-cypher-skill. Does NOT handle cluster ops or backups — use neo4j-cli-tools-skill. Property-level security and ABAC require Enterprise Edition.840 encore-code-reviewencoredev/skillsReview existing Encore.ts code for best practices and common anti-patterns.834 debugcyrusagents/cyrusFull debugging workflow — reproduce the bug with a focused check, perform root cause analysis, then implement a minimal fix.834 analyze-test-runmicrosoft/azure-skillsanalyze-test-run — an installable skill for AI agents.831 adversarial-revieweralirezarezvani/…e-skillsAdversarial code review that breaks the self-review monoculture. Use when you want a genuinely critical review of recent changes, before merging a PR, or when you suspect Claude is being too agreeable about code quality. Forces perspective shifts through hostile reviewer personas that catch blind spots the author's mental model shares with the reviewer.829 systematic-literature-reviewhuangwb8/chines…rchlatex当用户明确要求"做系统综述/文献综述/related work/相关工作/文献调研"时使用。AI 自定检索词，多源检索→去重→AI 逐篇阅读并评分（1–10分语义相关性与子主题分组）→按高分优先比例选文→自动生成"综/述"字数预算→资深领域专家自由写作（固定摘要/引言/子主题/讨论/展望/结论），保留正文字数与参考文献数硬校验，强制导出 PDF 与 Word。支持多语言翻译与智能编译（en/zh/ja/de/fr/es）。826