测试与安全 Skills - 测试与安全 Agent Skills推荐与安装 - 第74页 - AI导哈

apifox-test-caseapifox/apifox-cli-skillsApifox 接口测试用例：test-case 与 test-data 的查询、创建、更新、删除、分类和运行；处理测试步骤、断言、提取变量、前后置处理器、数据集，以及“CLI 创建后前端测试步骤无法展示”等问题。502 mean-reversionagiprolabs/clau…g-skillsMean-reversion strategy tools including Hurst exponent, half-life estimation, z-score signals, ADF testing, and Ornstein-Uhlenbeck modeling502 auto-review-loop-minimaxwanshuiyin/auto…in-sleepAutonomous multi-round research review loop using MiniMax API. Use when you want to use MiniMax instead of Codex MCP for external review. Trigger with "auto review loop minimax" or "minimax review".502 localizedonchitos/claud…-studiosLocalization pipeline — find hardcoded strings, extract string tables, cultural review, VO, RTL, enforce string freeze.502 patent-reviewwanshuiyin/auto…in-sleepGet an external patent examiner review of a patent application. Use when user says "专利审查", "patent review", "审查意见", "examiner review", or wants critical feedback on patent claims and specification.501 sumsub-integrate-travel-rulesumsub/agent-skillsEnd-to-end recipe for integrating Sumsub Travel Rule — deciding which of the three exchange flows applies, identifying the counterparty VASP, submitting the transfer, reading the exchange status, finalising or cancelling it, answering requests other VASPs send you, handling the unhosted-wallet path when no VASP is attributed, and finding existing transactions (deduplication before after-settlement exchanges). TRIGGER when the user asks to "integrate / add / implement Travel Rule", "send Travel Rule data with a withdrawal", "collect Travel Rule data for a deposit that already arrived", "respond to / answer incoming Travel Rule requests", asks why their exchanges sit at `onHold` or `completed` and never reach `finished`, why counterparties never answer, how to test Travel Rule in Sandbox, about "unhosted / self-hosted / non-custodial wallet verification", "prove the user owns the wallet", "Satoshi test", what happens on `counterpartyVaspNotFound` or `applicantKytTxnAwaitingUser`, or to "find / search transactions", "check whether a transaction already exists for this hash". SKIP for building the transaction payload itself (use `sumsub-create-transaction`), for writing the scoring rules that act on the outcome (use `sumsub-create-kyt-rules`), for bulk-registering wallet addresses (use `sumsub-manage-wallet-address-book`), and for KYC/AML work unrelated to transfers between VASPs.501 debug-hooksparcadei/contin…laude-v3Systematic hook debugging workflow. Use when hooks aren't firing, producing wrong output, or behaving unexpectedly.501 typescript-unit-testingbmad-labs/skillsUnit testing for TypeScript/NestJS projects using Jest, @golevelup/ts-jest (DeepMocked/createMock), and in-memory databases, with AAA structure. Use whenever the user is working on `.spec.ts` files or asks to set up Jest, write/add tests for a service/usecase/controller/guard/interceptor/pipe/filter, mock dependencies, review test quality or coverage, run unit tests, debug failing or flaky tests, or optimize test performance and open handles.501 test-automation-frameworkaj-geddes/usefu…-promptsDesign and implement scalable test automation frameworks with Page Object Model, fixtures, and reporting. Use for test framework, page object pattern, test architecture, test organization, and automation infrastructure.501 dependency-auditoruseai-pro/openc…securityAudit npm, pip, and Go dependencies that OpenClaw skills try to install. Checks for known vulnerabilities, typosquatting, and malicious packages.501 proxyman-traffic-debuggingproxymanapp/pro…skill.mdUse Proxyman MCP to inspect and debug HTTP, HTTPS, and WebSocket traffic and operate the complete Proxyman MCP surface. Use for flows, API diagnosis, filtering, export, replay, Compose, debugging rules, WebSockets, recording, proxy and certificate control, code generation, or guided setup.500 embedded-rustmohitmishra786/…v-skillsEmbedded Rust skill for bare-metal microcontroller development. Use when using probe-rs or cargo-embed for flashing and debugging, setting up defmt logging, using the RTIC framework, configuring cortex-m-rt startup, writing no_std + no_main firmware, or choosing between panic-halt and panic-semihosting. Activates on queries about embedded Rust, probe-rs, cargo-embed, defmt, RTIC, cortex-m-rt, no_std embedded, or panic handling in embedded Rust.500 write-unit-teststldraw/tldrawWriting unit and integration tests for the tldraw SDK. Use when creating new tests, adding test coverage, or fixing failing tests in packages/editor or packages/tldraw. Covers Vitest patterns, TestEditor usage, and test file organization.499 assembly-riscvmohitmishra786/…v-skillsRISC-V assembly skill for RV32/RV64 programming. Use when working with the RISC-V ISA, calling conventions (psABI), inline assembly with GCC/Clang, understanding extension naming (IMAFD), compressed instructions, or simulating RISC-V with QEMU and GDB remote debugging. Activates on queries about RISC-V assembly, RV32, RV64, RISC-V calling convention, RISC-V inline asm, RISC-V extensions, QEMU RISC-V, or RISC-V GDB.499 code-reviewjwynia/agent-skillsProvide structured code review guidance for catching defects and improving quality. This skill should be used when the user asks to 'review this code', 'check for issues', 'PR review', 'code quality check', or wants systematic code evaluation. Keywords: code review, PR, pull request, quality, defects, security, maintainability, performance.499 fivem-securitygermanfndez/fiv…i-skillsTrigger: security, anti-cheat, exploit, secure events, validate client data, server authority, distance check, rate limit, review server code. Harden FiveM net events and server-side validation.499 stress-testingaj-geddes/usefu…-promptsTest system behavior under extreme load conditions to identify breaking points, capacity limits, and failure modes. Use for stress test, capacity testing, breaking point analysis, spike test, and system limits validation.499 guide-swiftui-performance-auditprisma-labs-dev/apple-skillsAudit and improve SwiftUI runtime performance from code review and architecture. Use for requests to diagnose slow rendering, janky scrolling, high CPU/memory usage, excessive view updates, or layout thrash in SwiftUI apps, and to provide guidance for user-run Instruments profiling when code review alone is insufficient.499 citation-auditwanshuiyin/auto…in-sleepZero-context verification that every bibliographic entry in the paper is real, correctly attributed, and used in a context the cited paper actually supports — catching hallucinated authors, wrong years, fabricated venues, version mismatches, and wrong-context citations. Use when user says "审查引用", "check citations", "citation audit", "verify references", "引用核对", or before submission to ensure bibliography integrity.498 braintrust-tracingparcadei/contin…laude-v3Braintrust tracing for Claude Code - hook architecture, sub-agent correlation, debugging498 longbridge-performance-attributionlongbridge/skillsPortfolio performance attribution via Longbridge Securities — Brinson industry attribution (allocation / selection / interaction effects), factor alpha/beta decomposition (market β, value, momentum, size), and timing ability (Treynor-Mazuy model). For portfolio review and fund analysis. Requires login with Trade scope. Triggers: "业绩归因", "归因分析", "Brinson归因", "配置效应", "选股效应", "因子归因", "alpha来源", "择时效应", "業績歸因", "歸因分析", "Brinson歸因", "配置效應", "選股效應", "因子歸因", "performance attribution", "Brinson attribution", "allocation effect", "selection effect", "factor attribution", "alpha decomposition", "timing ability", "portfolio attribution", "T-M model", "Jensen alpha".497 app-store-asotimbroddin/app-…so-skillGenerate optimized Apple App Store metadata recommendations with ASO best practices. Use this skill when analyzing app listings, optimizing metadata (title, subtitle, description, keywords), performing competitive analysis, or validating App Store listing requirements. Triggers on queries about App Store optimization, metadata review, or screenshot strategy.497 ClawdStrikecantinaxyz/claw…ke-skillSecurity audit and threat model for OpenClaw gateway hosts. Use to verify OpenClaw configuration, exposure, skills/plugins, filesystem hygiene, and to produce an OK/VULNERABLE report with evidence and fixes.497 api-security-hardeningsecondsky/claude-skillsREST API security hardening with authentication, rate limiting, input validation, security headers. Use for production APIs, security audits, defense-in-depth, or encountering vulnerabilities, injection attacks, CORS issues.496 generatorsrshankras/claud…e-skillsCode generator skills that produce production-ready Swift code for common app components. Use when user wants to add logging, analytics, onboarding, review prompts, networking, authentication, paywalls, settings, persistence, error monitoring, CI/CD pipelines, localization, push notifications, deep linking, testing, accessibility, widgets, feature flags, app icons, image caching, pagination, HTTP caching, share cards, social export, subscription lifecycle, referral systems, watermarks, streak tracking, milestone celebrations, what's new screens, lapsed user re-engagement, usage insights, variable rewards, consent flows, account deletion, permission priming, force updates, state restoration, debug menus, offline queues, feedback forms, announcement banners, quick win sessions, Spotlight indexing, App Clips, screenshot automation, background processing, app extensions, data export, or SwiftUI preview sample data and variant matrices.496 longbridge-portfolio-diagnosislongbridge/skillsPortfolio diagnosis via Longbridge — concentration risk (top-5 weight), sector/industry distribution, currency exposure, factor exposure (large/small-cap, value/growth), pairwise correlation risk across holdings, and deviation from benchmark. Triggers: "组合诊断", "持仓集中度", "组合分析", "因子暴露", "行业分布", "货币敞口", "相关性风险", "组合检查", "組合診斷", "持倉集中度", "組合分析", "因子暴露", "行業分布", "貨幣敞口", "相關性風險", "portfolio diagnosis", "concentration risk", "factor exposure", "sector distribution", "currency exposure", "correlation risk", "portfolio review", "holdings analysis".496 database-performance-debuggingaj-geddes/usefu…-promptsDebug database performance issues through query analysis, index optimization, and execution plan review. Identify and fix slow queries.495 debugging-streamlitstreamlit/streamlitDebug Streamlit frontend and backend changes using make debug with hot-reload. Use when testing code changes, investigating bugs, checking UI behavior, or needing screenshots of the running app.495 create-testsshiplightai/agent-skillsDeprecated alias for create-yaml-tests. Renamed to create-yaml-tests; this entry only redirects for backward compatibility. Use create-yaml-tests to create, update, and repair local Shiplight YAML E2E tests.495 implementation-debuggingdylantarre/anim…inciplesUse when animation doesn't work as expected, has bugs, or behaves inconsistently495