Discover Testing & security skills, compare source repositories and read the instructions for each workflow.
MANDATORY quality gate. Run this skill BEFORE: (1) asking user "Is this okay?", (2) git commit, (3) creating PR, (4) presenting any implementation or design to user. Codex reviews in read-only sandbox, iterates...
TDD workflow: Generate tests BEFORE implementation. Use when user requests new feature or bug fix. Write failing tests first, then implement to pass. Creates unit, integration, and edge case tests.
Consult Codex for architectural decisions. Use when: (1) introducing patterns not in codebase, (2) 3+ design options exist, (3) performance-critical implementation, (4) major refactoring. Get risk assessment be...
Enforces Terraform best practices for safe and scalable infrastructure as code. Emphasizes modularity, state management, and security. Automatically applied for IaC implementation.
Terminal-based GitHub PR review tool. Review PRs without leaving the terminal using your favorite editor.
Fetch and verify latest official documentation before implementation. Use when implementing features with any library, framework, or technology. Prevents outdated patterns and deprecated API usage.
Verify current date from system. Use when outputting dates, scheduling, or time-sensitive operations. Prevents knowledge cutoff errors.
Enforces Go backend best practices following clean architecture, dependency injection, and test-driven development. Automatically applied for Go backend implementation, API development, and microservices constr...
Translates Figma designs into production-ready code with 1:1 visual fidelity. Automatically applied for frontend implementation, UI component creation, and when Figma URLs are provided.
MANDATORY quality gate. Auto-triggered before: ExitPlanMode, commit, PR, user confirmation. Handles plan file output, format/lint/build checks, and codex-review iteration.
檢查應用程式的安全配置，包括 HTTPS、CORS、Security Headers、Cookie 等
Skill 與 Agent 建立指導專家，協助開發者依據 GitHub Copilot 最佳實踐建立高品質的 custom agent 和 skill 定義檔案，包含 YAML frontmatter、MCP 整合與互動式工作流程設計。
Repository 設計指導技能，協助開發者根據業務需求選擇最合適的 Repository 設計策略（資料表導向 vs 需求導向 vs 混合模式）。
錯誤處理與 Result Pattern 技能，協助開發者實作統一的錯誤處理機制，包含 Result Pattern 應用、Failure 物件建立與分層錯誤處理策略。
檢查專案依賴套件的已知漏洞、過時版本和安全問題
Cucumber/Gherkin BDD 最佳實踐指導技能，提供 Gherkin 撰寫規範、情境設計原則、Discovery Workshop 引導與常見反模式識別，協助團隊撰寫高品質的行為驅動開發規格。
掃描程式碼和配置檔中的敏感資料洩漏，包括 API Keys、密碼、Token 等
執行完整的應用程式安全掃描，檢查 OWASP Top 10 漏洞、敏感資料洩漏、依賴套件漏洞和安全配置問題。
Handler 業務邏輯層實作技能，協助開發者實作符合專案規範的 Handler，包含業務邏輯處理、流程協調、Result Pattern 錯誤處理與跨 Repository 操作。
中介軟體實作技能，協助開發者實作符合專案規範的中介軟體，包含 TraceContext 管理、Exception Handling、Request Logging 與管線配置。
專案初始化與配置技能，負責引導使用者完成新專案的初始化、配置設定、GitHub 範本套用與專案狀態檢測。
BDD 測試實作技能，協助開發者使用 Reqnroll 撰寫行為驅動開發測試，包含 Gherkin 語法、測試步驟實作與 Docker 測試環境設定。
API 開發流程引導技能，協助開發者選擇合適的開發流程（API First 或 Code First），並提供 OpenAPI 規格管理、程式碼產生等自動化支援。
深度程式碼安全審查，檢測注入攻擊、XSS、CSRF、身份驗證和授權問題
The default order uses GitHub repository stars from our indexed data. Stars belong to the source repository and may be shared by multiple skills. They indicate repository interest, not skill installs or an independent quality score.