测试与安全 Skills - 测试与安全 Agent Skills推荐与安装 - 第75页 - AI导哈

comfort-safetydylantarre/anim…inciplesUse when creating animations that reassure users, reduce anxiety, or communicate protection and security.495 longbridge-quant-statslongbridge/skillsQuantitative statistics framework for time-series analysis using Longbridge price data — ADF unit root test (stationarity), cointegration (Engle-Granger / Johansen), GARCH volatility modelling (conditional heteroskedasticity), regression diagnostics (Durbin-Watson / Breusch-Pagan), bootstrap confidence intervals, hypothesis tests (t-test / F-test). Requires statsmodels and scipy. Triggers: "量化统计", "ADF检验", "单位根", "协整检验", "GARCH", "自相关", "异方差", "Bootstrap", "假设检验", "量化統計", "ADF檢驗", "單位根", "協整檢驗", "異方差", "假設檢驗", "quantitative statistics", "ADF test", "unit root", "cointegration", "GARCH", "autocorrelation", "heteroskedasticity", "bootstrap", "hypothesis test", "statsmodels".494 supabase-audit-auth-usersyoanbernabeu/su…t-skillsTest for user enumeration vulnerabilities through various authentication endpoints.493 python-authoringpaulnsorensen/e…y-cheeseWrite, edit, refactor, or review Python in easy-cheese with concise stdlib-first code, Python 3.12, wedge .pyz packaging, and repository test and validation conventions. Use for Python changes under src/, scripts/, .github/scripts/, or tests/, especially when the user asks for Pythonic, succinct, de-slopped, dataclass-based, CLI, validator, or bundled-helper code.493 apifox-test-automationapifox/apifox-cli-skillsApifox 自动化测试执行、套件与 CI：test-suite、scheduled-task、runner、apifox run、执行参数、迭代数据、报告上传和 CI 回归。复杂 test-scenario 步骤建模请使用 apifox-test-scenario。493 dependency-auditbriiirussell/cy…y-skillsAudit project dependencies, frameworks, languages, and dev tools for known vulnerabilities, CVEs, and security anti-patterns. Use when the user mentions 'dependency audit,' 'npm audit,' 'CVE,' 'vulnerable packages,' 'supply chain security,' 'outdated dependencies,' 'known vulnerabilities,' 'security advisory,' 'package security,' 'framework vulnerability,' 'is this package safe,' 'pnpm audit,' 'yarn audit,' 'bundle audit,' 'patch this CVE,' 'audit fix broke,' 'lockfile diff,' 'dependency confusion,' 'registry redirection,' 'MCP server pinning,' 'release pipeline,' or needs to check whether their stack, CI, or release pipeline has known security issues.492 securityrshankras/claud…e-skillsSecurity category index for Apple platforms. Routes to the privacy-manifests skill. General secure-storage/biometrics/ATS guidance was retired in the 2026 blind-test audit — current models cover it natively.492 review-testingposit-dev/skillsReview test code for quality, design, and completeness after implementing a feature or fixing a bug. Use when the user asks to "review my tests", "check my test quality", "are these tests good enough", "review testing", or after completing a feature implementation that includes tests. Also use when tests feel brittle, flaky, or superficial. Cross-references production code to find coverage gaps.492 resolve-agent-reviewspbakaus/agent-reviewsResolve PR review bot findings on current PR. Fetches unanswered bot comments, evaluates each finding, fixes real bugs, dismisses false positives, replies to every comment, and waits for the head commit's checks until a pass is clean.492 milestone-reviewdonchitos/claud…-studiosMilestone progress review — completeness, quality metrics, risk, go/no-go recommendation. At checkpoints or before a deadline.492 github-webhookshookdeck/webhook-skillsReceive and verify GitHub webhooks. Use when setting up GitHub webhook handlers, debugging signature verification, or handling repository events like push, pull_request, issues, or release.491 container-debuggingaj-geddes/usefu…-promptsDebug Docker containers and containerized applications. Diagnose deployment issues, container lifecycle problems, and resource constraints.491 test-driven-developmentnousresearch/he…es-agentTDD: enforce RED-GREEN-REFACTOR, tests before code.490 best-practicesadobe/skillsAEM as a Cloud Service Java/OSGi best practices, guardrails, and legacy-to-cloud pattern transformations. Use for Cloud Service–correct bundles, deprecated APIs, schedulers, ResourceChangeListener, replication, Replicator, JCR observation (javax.jcr.observation.EventListener), OSGi Event Admin (org.osgi.service.event.EventHandler), DAM AssetManager, BPA-style fixes, HTL (Sightly) Cloud SDK lint warnings (data-sly-test redundant constant value comparison), or any time you need the detailed pattern reference modules under this skill.490 apifox-test-scenarioapifox/apifox-cli-skillsApifox 测试场景建模：test-scenario 的查询、创建、更新、删除和运行；导入接口、单接口用例或其它场景步骤；添加场景引用步骤；复杂步骤编排、接口步骤/条件/循环/等待/脚本/数据库等步骤衔接、前后置操作、变量引用、断言、提取器和场景调试最佳实践。用户要创建或维护复杂自动化测试流程时使用。490 legal-advisorsickn33/agentic…e-skillsDraft privacy policies, terms of service, disclaimers, and legal notices. Prepares jurisdiction-aware drafts for qualified review, cookie policies, and data processing agreements.490 browser-skilltencent/browserskillAutomate the user's logged-in Chromium browser: read pages, fill forms, scrape data, operate tabs, test a UI, or debug a website. Requires the bsk CLI and browser extension.489 security-researchcode-yeongyu/oh…penagentTeam Mode security research skill. Orchestrates 3 vulnerability hunters and 2 PoC engineers to audit a codebase in parallel, prove exploitability, classify root causes, and calibrate severity by actual exploitability. Use for security review, vulnerability research, exploitability audit, pre-release security check, threat model validation, and `/security-research`. Triggers: 'security-research', 'security research', 'security review', 'vulnerability audit', 'exploitability audit', '보안 리뷰', '취약점 감사'.489 rust-no-stdmohitmishra786/…v-skillsGuide no_std Rust development for embedded and bare-metal targets. Use when writing #![no_std] crates, understanding core vs alloc vs std, implementing custom global allocators, selecting panic handlers for embedded, or testing no_std crates on the host without hardware.488 dwarf-debug-formatmohitmishra786/…v-skillsDWARF debug format skill for understanding debug information. Use when inspecting DWARF sections with dwarfdump, working with split DWARF (.dwo files), setting up debuginfod for remote symbol resolution, or understanding how DWARF interacts with LTO and symbol stripping. Activates on queries about DWARF, .debug_info, .debug_line, dwarfdump, split DWARF, .dwo files, debuginfod, or debug info stripping.488 binary-hardeningmohitmishra786/…v-skillsBinary hardening skill for security-hardened C/C++ builds. Use when enabling RELRO, PIE, stack canaries, FORTIFY_SOURCE, CFI sanitizers, shadow stack, or seccomp-bpf syscall filtering. Covers checksec analysis, compiler and linker flags for hardened builds, and NSA/CISA-recommended mitigations. Activates on queries about binary hardening, checksec, RELRO, PIE, stack canaries, FORTIFY_SOURCE, CFI, shadow stack, or seccomp.488 typescript-expertdavila7/claude-…emplatesTypeScript and JavaScript expert with deep knowledge of type-level programming, performance optimization, monorepo management, migration strategies, and modern tooling. Use PROACTIVELY for any TypeScript/JavaScript issues including complex type gymnastics, build performance, debugging, and architectural decisions. If a specialized expert is a better fit, I will recommend switching and stop.488 pr-review-ci-fixcomposio-community/awesome-codex-skillsAutomated PR review and CI auto-fix for GitHub and GitLab using the Composio CLI. Pulls diffs, fetches failing job logs, posts review comments, and loops fix commits until checks go green.488 qa-plandonchitos/claud…-studiosQA test plan for a sprint — classifies stories by Logic/Integration/Visual/UI, covers automated tests, manual cases, smoke scope.488 bmad-teabmad-code-org/b…terpriseMaster Test Architect and Quality Advisor. Use when the user asks to talk to Murat or requests the Test Architect.488 complete-skillparcadei/contin…laude-v3A complete skill for E2E testing487 team-polishdonchitos/claud…-studiosOrchestrate the polish team — performance-analyst, technical-artist, sound-designer, qa-tester — to optimize and harden a feature or area.487 fixparcadei/contin…laude-v3Meta-skill workflow orchestrator for bug investigation and resolution. Routes to debug, implement, test, and commit based on scope.486 spending-reviewopenaccountant/skillsGenerate a categorized spending breakdown with month-over-month trends.486 review-harness-spechedera-dev/hedera-skillsAudit an existing hedera-harness recipe for wiring and evaluate-checklist problems before a run. Use when the user wants a harness recipe reviewed before running it.486