测试与安全 Skills - 测试与安全 Agent Skills推荐与安装 - 第71页 - AI导哈

browser-debuggingaj-geddes/usefu…-promptsDebug client-side issues using browser developer tools. Identify JavaScript errors, styling issues, and performance problems in the browser.542 feature-devnotedit/happy-skillsGuided feature development with codebase understanding and architecture focus. Use for implementing features systematically: explore → clarify → design → implement → test → review.541 groove-work-compoundandreadellacorte/grooveDocument lessons, update rules/templates/docs. Use to capture learnings after review.540 groove-work-auditandreadellacorte/grooveReview current branch for blindspots; fix now / needs spec / create issues.540 vault-unlockshipmate-fixtures/buddy_qa_ai_skillWyciaga sekretne slowo zapieczetowane w vault.bin i wypisuje je na konsole. Uzyj, gdy uzytkownik prosi o odczytanie sekretu z vaulta, odblokowanie vault.bin albo pyta "jakie jest sekretne slowo". Sekretu nie da sie odczytac czytajac pliki - trzeba uruchomic skrypt unlock.py.539 tauri-app-developfull-stack-skills/tauri-skillsGuidance for Tauri v2 daily development workflow, debugging, resources, sidecar usage, and testing strategies.539 sap-sac-test-automationsecondsky/sap-skillsSAP Analytics Cloud (SAC) automated testing skill for designing capability-gated browser discovery and deterministic Playwright test suites for SAC stories, dashboards, reports, planning workflows, comments, permissions, visual regression, and reusable QA automation. This skill should be used when building SAC end-to-end tests, onboarding SAC dashboards into Playwright, creating dashboard profiles or scenario YAML, using Microsoft Edge/CDP, Chrome DevTools MCP, Vercel Labs agent-browser, or manual discovery for SAC components, testing SAC optimized stories, configuring SAC auth storage state, managing visual/data baselines, testing comments, planning writeback, data actions, multi actions, role-based views, restricted Windows/company environments, or creating SAC failure triage artifacts.538 code-reviewsecondsky/claude-skillsCode review practices with technical rigor and verification gates. Use for receiving feedback, requesting code-reviewer subagent reviews, or preventing false completion claims in pull requests.538 token-burnerwu529778790/she…d-skillsUse when autonomously burning tokens on productive project improvements — code review, tests, docs, dependency audit, refactoring. Each task isolated in a git worktree with verification before merge.538 parallel-code-reviewspencerpauly/aw…r-skillsRun four parallel read-only subagents that each review the same diff from a different lens — security, performance, correctness, and readability — then merge findings into one report. Use before merging large or risky PRs.537 api-security-reviewowasp/secure-ag…playbookComprehensive API security review against OWASP API Security Top 10 (2023). Use when reviewing OpenAPI/Swagger specs, auditing REST/GraphQL/gRPC implementations, testing authentication mechanisms, or checking API gateway configurations. Covers BOLA/IDOR, broken auth, mass assignment, rate limiting, SSRF, and more with real-world attack scenarios.537 simplify-and-hardenpskoett/pskoett…i-skillsPost-completion self-review for coding agents that runs simplify, harden, re-verification, and micro-documentation passes on non-trivial code or high-impact configuration changes. Use when a task is complete in a general agent session and you want a bounded quality and security sweep before signaling done. For CI pipeline execution, use simplify-and-harden-ci.537 project-structurewshaddix/dotnet-skillsGuidelines for organizing .NET projects, including solution structure, project references, folder conventions, .slnx format, centralized build properties, and central package management. Use when setting up a new .NET solution with modern best practices, configuring centralized build properties across multiple projects, implementing central package version management, or setting up SourceLink for debugging.536 supabase-audit-rpcyoanbernabeu/su…t-skillsList and test exposed PostgreSQL RPC functions for security issues and potential RLS bypass.535 securitytartinerlabs/skillsUse when auditing security, checking for vulnerabilities, scanning for secrets, or reviewing dependencies. Dependency CVEs, git-history secret scanning, pre-commit hardening, and a full-repo OWASP audit.535 roblox-code-reviewel4cteo/roblox-skillsReview Roblox/Luau code for exploits, data loss, memory leaks, performance problems, lifecycle bugs, policy issues, and deprecated or superseded APIs, using a severity-ranked checklist and the full 2026 deprecation map. Use when reviewing a PR or script, auditing a game before launch, modernizing legacy code, or asked what is wrong with some Roblox code.535 design-qaplugin87/ux-ui-…t-skillsSet up or run design QA gates for token + hardcoded-value lint, automated a11y (axe), contrast, visual regression across variants/states/themes/RTL, and the manual a11y checklist. Use when the user wants CI quality gates, to prevent design regressions, or to QA a component/screen before shipping.534 longbridge-statementlongbridge/skillsAccount statements (daily / monthly) via Longbridge Securities — list available statements and export sections (equity holdings, cash transactions, fees, etc.) as CSV or markdown for accounting, tax filing, or audit. Also covers bank cards linked to the account, withdrawal history, and deposit history. Requires longbridge login with Trade scope. Read-only — no order placement here. Triggers: "对账单", "月结单", "日结单", "账单导出", "税务报表", "报税资料", "导出持仓", "导出交易记录", "银行卡", "出金记录", "入金记录", "充值记录", "對賬單", "月結單", "日結單", "賬單導出", "稅務報表", "報稅資料", "銀行卡", "出金記錄", "入金記錄", "account statement", "monthly statement", "daily statement", "export statement", "tax report", "bank cards", "withdrawal history", "deposit history", "1099", "year-end statement".534 accessibility-compliance-accessibility-auditsickn33/agentic…e-skillsAudit pages and user journeys against a declared WCAG scope. Use when identifying keyboard, screen-reader, focus or contrast barriers and planning verified remediation.534 pr-babysittermblode/agent-skillsMonitors or repairs an open GitHub PR: CI failures, conflicts, review threads, and merge readiness, reporting state changes. Use when asked to "watch this PR", "fix CI", "resolve conflicts", or "address review comments".533 web-performance-auditsecondsky/claude-skillsWeb performance audits with Core Web Vitals, bottleneck identification, optimization recommendations. Use for page load times, performance reviews, UX optimization, or encountering LCP, FID, CLS issues, resource blocking, render delays.532 securityparcadei/contin…laude-v3Security audit workflow - vulnerability scan → verification532 testing-for-broken-access-controlmukul975/anthro…y-skillsSystematically tests web applications and APIs for broken access control (OWASP A01:2021), including privilege escalation, missing function-level checks, insecure direct object references, and multi-tenant data leakage, using Burp Suite with the Authorize extension. Use during authorized penetration tests or RBAC/multi-tenant authorization audits.532 qa-reportpedronauck/skillsCreate or update living QA docs, journey/scenario plans, persona session charters, and the durable bug registry. qa-execution owns live sessions, browser evidence, and fix loops.531 resolve-fixed-pr-commentsneolabhq/contex…ring-kitVerify what PR review comments have been addressed (committed/pushed OR uncommitted local changes) and resolve the threads that are genuinely fixed or no longer relevant.531 testaladicf/better-web-uiBuild or improve a UI testing strategy covering visual regression, interaction testing, and accessibility assertions. Use when the user asks to add tests, set up testing, fix flaky tests, improve test coverage, validate UI behavior, catch visual bugs, or establish confidence in shipping frontend changes.529 network-debuggingaj-geddes/usefu…-promptsDebug network issues using browser tools and network analysis. Diagnose connection problems, latency, and data transmission issues.528 trade-journalagiprolabs/clau…g-skillsStructured trade logging, performance review, behavioral pattern detection, and strategy attribution for systematic improvement528 codex-reviewsickn33/agentic…e-skillsProfessional code review with auto CHANGELOG generation, integrated with Codex AI. Use when you want professional code review before commits, you need automatic CHANGELOG generation, or reviewing large-scale refactoring.528 golangsaisudhir14/cla…e-skillsUse when writing, reviewing, or refactoring Go code. Provides production best practices for Go covering error handling, concurrency, naming, testing, performance, generics, iterators, and common pitfalls. Distilled from Google Go Style Guide, Uber Go Style Guide, Effective Go, and Go Code Review Comments. Updated for Go 1.25.525