测试与安全 Skills - 测试与安全 Agent Skills推荐与安装 - 第69页 - AI导哈

rust-securitymohitmishra786/…v-skillsRust security skill for supply chain safety and memory-safe development. Use when auditing dependencies with cargo-audit, enforcing policies with cargo-deny, reviewing RUSTSEC advisories, writing memory-safe FFI patterns, or integrating fuzzing and Miri into a security review pipeline. Activates on queries about cargo-audit, cargo-deny, RUSTSEC advisories, supply chain security, Rust CVEs, safe FFI, or fuzzing for security.563 sap-fiori-opa5-test-developmentsap/open-ux-toolsUse this skill when writing, fixing, extending, or reviewing OPA5 integration tests for SAP Fiori Elements applications - whether the app uses OData V4 (sap.fe.test library) or OData V2 (fioriElementsTestLibrary). Triggers on any request involving OPA5 journeys, page objects, JourneyRunner setup, test structure, mock data, or debugging test failures in a SAP Fiori Elements project generated by SAP Fiori tools. Use even when the user says "write integration tests" or "add an OPA journey" without specifying the library, as long as the project context is SAP Fiori Elements. Not applicable to freestyle UI5 apps.562 rust-debuggingmohitmishra786/…v-skillsRust debugging skill for systems programming. Use when debugging Rust binaries with GDB or LLDB, enabling Rust pretty-printers, interpreting panics and backtraces, debugging async/await with tokio-console, stepping through no_std code, or using dbg! and tracing macros effectively. Activates on queries about rust-gdb, rust-lldb, RUST_BACKTRACE, Rust panics, debugging async Rust, tokio-console, or pretty-printers.562 statistical-analystalirezarezvani/…e-skillsRun hypothesis tests, analyze A/B experiment results, calculate sample sizes, and interpret statistical significance with effect sizes. Use when you need to validate whether observed differences are real, size an experiment correctly before launch, or interpret test results with confidence.562 document-revieweveryinc/compou…g-pluginReview requirements or plan documents using parallel persona agents that surface role-specific issues. Use when a requirements document or plan document exists and the user wants to improve it.562 rtos-debugleokemp223/embed-ai-tool当需要进行 FreeRTOS/RT-Thread/Zephyr 的线程感知调试，查看任务列表、栈水位或死锁检测时使用。561 review-responsegalaxy-dawn/cla…-scholarSystematic review response workflow from comment analysis to professional rebuttal writing. Use when the user asks to "write rebuttal", "respond to reviewers", "draft review response", or "analyze review comments". Improves paper acceptance rates.560 apexmelvynx/aiblueprintRun adaptive APEX implementation with scoped delegation, durable checkpoints, risk-based tests and review, and proof-backed verification. Use for features, bug fixes, migrations, or code changes requiring disciplined execution.559 debug-jlinkleokemp223/embed-ai-tool当需要通过 J-Link GDB Server 启动或附着 GDB 会话，完成固件下载、在线调试或崩溃现场检查时使用。558 security-guidancealirezarezvani/…e-skillsPreToolUse security-anti-pattern hook for Claude Code. Catches 12 common security risks (command injection, XSS, SQL injection, unsafe deserialization, GitHub Actions workflow injection, eval/new Function code injection) BEFORE the Edit/Write/MultiEdit operation completes. Session-state caching prevents duplicate warnings on the same file+rule combo. Stdlib only — no dependencies. Use when you want a safety net during Claude Code sessions that touch security-sensitive code (auth, payments, user input handling, IaC). Disable with ENABLE_SECURITY_REMINDER=0 if you need to perform a verified-safe operation that would otherwise trip a pattern. Triggers — "add security hook", "block unsafe code", "detect command injection before write", "prevent SQL injection patterns", "security warning hook".558 systematic-debuggingspencerpauly/aw…r-skillsStructured debugging methodology — reproduce, isolate, hypothesize, verify. Covers git bisect, binary search, logging, and minimal reproduction.557 can-debugleokemp223/embed-ai-tool当需要调试 CAN 总线通信时使用，支持通过 USB-CAN 适配器监听、发送 CAN 帧和扫描节点。557 accreditation-desk-reviewgasserane/perso…l-skillsConduct an IPPF Member Association (MA) accreditation desk review against the IPPF EN Internal Guidelines Accreditation Review (Cycle 4 / ARV cycle, where ARV means Accreditation Review, NOT antiretroviral). Use when Ane assesses an MA self-assessment against accreditation principles, standards or checks, writes reviewer conclusions in the desk-review Word template, or prepares pre-interview document requests and interview questions, including on a bare principle, standard or check number ('do principle 8'). Not for literature reviews (evidence-synthesis), interview or survey guides (instrument-designer), indicator design (indicator-designer), or any clinical antiretroviral 'ARV' question.557 roblox-testingel4cteo/roblox-skillsTesting Roblox code - testable modules with dependency injection, Jest Lua (runCLI, .spec files), legacy TestEZ, running tests in Studio, via Studio MCP, run-in-roblox, or CI with Open Cloud Luau Execution, Lune for pure Luau, multi-client playtests, QA checklist. Use when adding tests, setting up a test runner or CI, or verifying a gameplay change works.557 security-passwordseyadkelleh/awes…securityTop password lists for authorized security testing: common passwords, darkweb leaks, worst passwords. Curated essentials (<10MB).557 codex-reviewjezweb/claude-skillsRun an independent code review using the OpenAI Codex CLI in headless mode. Gets a second opinion from a different model family (the current Codex models) on recent changes, a PR, a commit, or the whole app — covering bugs, regressions, security, data consistency, UX/state bugs, performance risks, and testing gaps. Saves a severity-prioritised report to .jez/reviews/. Triggers: 'codex review', 'review with codex', 'independent code review', 'what does codex think', 'get codex to review'.556 grinding-until-passspencerpauly/aw…r-skillsKeep iterating on code changes until the tests pass, the build succeeds, or linting is clean. Runs in a tight loop of fix → run → check → repeat. Use when you want the agent to autonomously grind through test failures or build errors.556 openocd-jtagmohitmishra786/…v-skillsOpenOCD skill for embedded hardware debugging. Use when configuring OpenOCD for JTAG or SWD targets, flashing firmware, connecting GDB to bare-metal targets, setting hardware watchpoints, or using J-Link with OpenOCD. Activates on queries about OpenOCD, JTAG, SWD, GDB remote target, flash programming, hardware breakpoints, J-Link, or connecting GDB to an MCU.556 testcontainers-integration-testsaaronontheweb/d…t-skillsWrite integration tests using TestContainers for .NET with xUnit. Covers infrastructure testing with real databases, message queues, and caches in Docker containers instead of mocks.556 cr-receivedsentimony/agent…workflowYou MUST use this when findings from a code review, pull request comments, CI or static-analysis output, or reviewer suggestions need a decision before any fix - a cr-request result, a spec or plan review, or a reviewer's message - in any programming language. Verifies each finding against the current tree, decides accept, reject, partial, defer, or escalate with evidence, fixes only what holds up, records the decisions in the plan's execution record, and routes back to verify. Replaces devflow review-resolution.556 visa-debugleokemp223/embed-ai-tool当需要调试 GPIB/USB/TCP/Serial VISA 仪器通信时使用，支持 SCPI 命令收发、波形捕获、截图和持续监控。555 code-review-excellencesickn33/agentic…e-skillsTransform code reviews from gatekeeping to knowledge sharing through constructive feedback, systematic analysis, and collaborative improvement.555 code-reviewvercel-labs/open-agentsReviews code changes and provides actionable feedback. Use when the user asks to review a PR, diff, commit, or code changes. Triggers on "/review", "review this PR", "review my changes", "code review".555 cmux-reviewmanaflow-ai/cmuxReview agent-written changes before merge, after substantial edits, or when re-reviewing a repair. Use the adversarial protocol for high-risk changes or an explicitly requested deep review.554 quality-code-reviewfrappe/skillsReview code for any Frappe application — a checklist distilled from years of engineering practice on correctness, security, performance, concurrency, readability, API design, and testing. Use this when reviewing a diff, a PR, or a piece of code for quality and security, or when you want a reviewer's checklist grounded in hard-won Frappe/ERPNext lessons.554 llm-testingeyadkelleh/awes…securityComprehensive LLM security testing prompts for bias detection, data leakage, alignment testing, and adversarial prompt resistance.554 auto-paper-improvement-loopwanshuiyin/auto…in-sleepAutonomously improve a generated paper via GPT-6-Astra xhigh review → implement fixes → recompile, for 2 rounds. Use when user says "改论文", "improve paper", "论文润色循环", "auto improve", or wants to iteratively polish a generated paper.553 code-touralirezarezvani/…e-skillsUse when the user asks to create a CodeTour .tour file — persona-targeted, step-by-step walkthroughs that link to real files and line numbers. Trigger for: create a tour, onboarding tour, architecture tour, PR review tour, explain how X works, vibe check, RCA tour, contributor guide, or any structured code walkthrough request.553 integration-testingaj-geddes/usefu…-promptsDesign and implement integration tests that verify component interactions, API endpoints, database operations, and external service communication. Use for integration test, API test, end-to-end component testing, and service layer validation.553 finish-prpinguapps/skillsComplete the current PR through conflicts, CI and all incoming review feedback, then merge when green unless human review or a manual handoff was requested. Includes explicit Copilot quota handling and evidence-based settlement of addressed Copilot threads.552