GitHub
architecture-review
当在评估系统架构、平台设计或高层代码库结构时，关注可扩展性、可靠性、耦合、数据一致性或运行风险时使用。
☆ 6View skill
Testing & security AI Skills
Discover Testing & security skills, compare source repositories and read the instructions for each workflow.
Categories: Testing & security
Testing & security Clear filters
Browse skills
GitHub
loop-until-done
Use when 用户明确要求反复执行或迭代直到完成（如 “loop until done”, “keep iterating”, “repeat until fixed”）。
☆ 6View skill
GitHub
develop-feature
Use when 需要新增功能、端点、UI 流程、集成或数据模型变更，且涉及多文件影响或需求不清，需要范围规划。
☆ 6View skill
GitHub
commit-message
当需要基于已暂存的 git 变更或粘贴的 diff 生成 Conventional Commits 提交信息时使用。
☆ 6View skill
GitHub
vuln-patterns-core
Universal vulnerability detection patterns applicable across all programming languages. Includes hardcoded secrets, SQL/command injection, path traversal, and configuration file patterns.
☆ 6View skill
GitHub
remediation-crypto
Security fix patterns for cryptographic vulnerabilities (weak algorithms, insecure randomness, TLS issues). Provides language-specific secure implementations.
☆ 6View skill
GitHub
remediation-library
Index of security remediation skills. Routes to specialized skills for injection, cryptography, authentication, and configuration vulnerabilities.
☆ 6View skill
GitHub
remediation-config
Security fix patterns for configuration and deployment vulnerabilities (path traversal, debug mode, security headers). Provides language-specific secure implementations.
☆ 6View skill
GitHub
git-workflows
This skill should be used for branching strategies, conventional commits, PR workflows, and release management, git flow, trunk-based development, merge strategies
☆ 6View skill
GitHub
react-patterns
This skill should be used for React hooks, components, state management, performance, frontend TypeScript, Next.js, JSX/TSX, web UI components
☆ 6View skill
GitHub
java-patterns
This skill should be used for Java/Spring patterns, dependency injection, streams, Optional, Kotlin, Spring Boot, Maven, Gradle, JVM backend
☆ 6View skill
GitHub
go-patterns
This skill should be used for Go idioms, error handling, goroutines, interfaces, and testing, golang, Go language, Go modules, Go concurrency
☆ 6View skill
GitHub
remediation-auth
Security fix patterns for authentication and authorization vulnerabilities (credentials, JWT, deserialization, access control). Provides language-specific secure implementations.
☆ 6View skill
GitHub
vuln-patterns-languages
Language-specific vulnerability detection patterns for JavaScript/TypeScript, Python, Go, Java, Ruby, and PHP. Provides regex patterns and grep commands for common security vulnerabilities.
☆ 6View skill
GitHub
plan-management
This skill should be used when creating, reading, or updating devloop plans in .devloop/plan.md, task tracking, progress logs, phase management, PR feedback
☆ 6View skill
GitHub
api-design
This skill should be used for REST API, GraphQL, versioning, pagination, authentication, backend routes, web services, HTTP endpoints, server API design
☆ 6View skill
GitHub
security-checklist
This skill should be used for OWASP, security review, authentication, XSS, SQL injection prevention, CSRF, input validation, secure coding, vulnerability scanning
☆ 6View skill
GitHub
atomic-commits
This skill should be used for guidance on commit size, scope, and creating reviewable commits, splitting large changes, commit hygiene
☆ 6View skill
GitHub
database-patterns
This skill should be used for database schema design, indexes, query optimization, migrations, SQL, PostgreSQL, MySQL, ORM patterns, data modeling, database relationships
☆ 6View skill
GitHub
local-config
This skill should be used for configuring devloop project settings via .devloop/local.md, git workflow preferences, commit settings, review options
☆ 6View skill
GitHub
pr-feedback
This skill should be used for integrating PR review comments back into devloop plan, parsing review feedback, addressing reviewer concerns
☆ 6View skill
GitHub
vulnerability-patterns
Index of vulnerability detection pattern skills. Routes to core patterns (universal) and language-specific patterns for security scanning.
☆ 6View skill
GitHub
project-context
Detects project tech stack, languages, frameworks, and security-relevant features. Use when you need to understand the project structure for security analysis or audit scoping.
☆ 6View skill
GitHub
audit-report
Template and formatting guidelines for security audit reports. Provides consistent structure for findings, severity classification, ASVS mapping, and remediation recommendations.
☆ 6View skill
The default order uses GitHub repository stars from our indexed data. Stars belong to the source repository and may be shared by multiple skills. They indicate repository interest, not skill installs or an independent quality score.