security-deep-review
深度程式碼安全審查,檢測注入攻擊、XSS、CSRF、身份驗證和授權問題
Discover Business skills, compare source repositories and read the instructions for each workflow.
深度程式碼安全審查,檢測注入攻擊、XSS、CSRF、身份驗證和授權問題
Web API 測試實作技能,協助開發者使用 Testcontainers + Reqnroll 撰寫完整的 API 整合測試,包含 Docker 測試環境、BDD 情境定義與測試步驟實作。
GitHub Copilot Skill 與 Agent 設計指導技能,協助開發者設計與實作高品質的 Skill 和 Agent,包含架構設計、最佳實踐、工作流程規劃與常見反模式識別。
EF Core 操作與最佳化技能,協助開發者正確使用 Entity Framework Core,包含 DbContextFactory 模式、查詢最佳化、Migration 管理與反向工程。
Enforce TDD workflow and ensure proper execution of the Red-Green-Refactor cycle. Use when starting a new feature implementation, bug fix, or refactoring.
Ensure complete compliance with code quality standards. Use before commit, before PR creation, or when quality issues are detected.
Automatically report work progress as comments on GitHub Issues. Use upon completion of major milestones, PR creation, merge completion, or when explicitly requested.
Detect changes that require documentation updates and suggest/execute updates. Use when code changes may impact documentation, during pre-PR creation checklist, or when explicitly requested.
DAG 기반 세션 시작과 다음 작업 추천
다층 컨텍스트 수집과 의존성 주입
통합 검증과 자동 재시도
Orchestrates a dual-AI engineering loop where Claude Code plans and implements, while Codex validates and reviews, with continuous feedback for optimal code quality
Prevents "lazy" coding habits by enforcing full implementation and banning placeholders.
Git commit 前的完整驗證檢查。當用戶提到「commit」、「提交」、「push」或完成重要修改時自動執行。
Supabase schema validation, RLS enforcement, and API security best practices.
Adapts NASA's "Power of 10" safety rules for high-reliability TypeScript code.
Enforce the "Premium" aesthetic and accessibility standards.
Default-Deny security posture for Supabase. Mandates strict RLS and 'WITH CHECK' clauses.
Enforces high-level architectural thinking, separation of concerns, and scalability checks before coding.
驗證 maihouses 專案的 TypeScript/React 代碼品質,確保符合 CLAUDE.md 的最高規格標準。當修改或審查代碼時自動使用。
Checklist for security-sensitive coding, ensuring MaiHouses guards and policies are respected.
Ensure every critical action is logged (vital for UAG/Trust Room).
簡化與精煉代碼,提升清晰度、一致性和可維護性,同時保留所有功能。 預設聚焦於最近修改的代碼,除非另有指示。 觸發時機: - 完成功能實作後,需要清理代碼 - 發現代碼過於複雜或難以理解 - 重構既有代碼以提升可讀性 - 用...
A "No-Compromise" React performance checklist enforcing strict re-render discipline and bundle auditing.
The default order uses GitHub repository stars from our indexed data. Stars belong to the source repository and may be shared by multiple skills. They indicate repository interest, not skill installs or an independent quality score.