GitHub
architecture-review
当在评估系统架构、平台设计或高层代码库结构时，关注可扩展性、可靠性、耦合、数据一致性或运行风险时使用。
☆ 6查看技能
测试与安全 AI 技能
发现 测试与安全 相关 Skills，比较来源仓库和用途，查看适合你工作流的技能说明。
分类目录: 测试与安全
测试与安全 清除筛选
全部技能
GitHub
loop-until-done
Use when 用户明确要求反复执行或迭代直到完成（如 “loop until done”, “keep iterating”, “repeat until fixed”）。
☆ 6查看技能
GitHub
develop-feature
Use when 需要新增功能、端点、UI 流程、集成或数据模型变更，且涉及多文件影响或需求不清，需要范围规划。
☆ 6查看技能
GitHub
commit-message
当需要基于已暂存的 git 变更或粘贴的 diff 生成 Conventional Commits 提交信息时使用。
☆ 6查看技能
GitHub
vuln-patterns-core
Universal vulnerability detection patterns applicable across all programming languages. Includes hardcoded secrets, SQL/command injection, path traversal, and configuration file patterns.
☆ 6查看技能
GitHub
remediation-crypto
Security fix patterns for cryptographic vulnerabilities (weak algorithms, insecure randomness, TLS issues). Provides language-specific secure implementations.
☆ 6查看技能
GitHub
remediation-library
Index of security remediation skills. Routes to specialized skills for injection, cryptography, authentication, and configuration vulnerabilities.
☆ 6查看技能
GitHub
remediation-config
Security fix patterns for configuration and deployment vulnerabilities (path traversal, debug mode, security headers). Provides language-specific secure implementations.
☆ 6查看技能
GitHub
git-workflows
This skill should be used for branching strategies, conventional commits, PR workflows, and release management, git flow, trunk-based development, merge strategies
☆ 6查看技能
GitHub
react-patterns
This skill should be used for React hooks, components, state management, performance, frontend TypeScript, Next.js, JSX/TSX, web UI components
☆ 6查看技能
GitHub
java-patterns
This skill should be used for Java/Spring patterns, dependency injection, streams, Optional, Kotlin, Spring Boot, Maven, Gradle, JVM backend
☆ 6查看技能
GitHub
go-patterns
This skill should be used for Go idioms, error handling, goroutines, interfaces, and testing, golang, Go language, Go modules, Go concurrency
☆ 6查看技能
GitHub
remediation-auth
Security fix patterns for authentication and authorization vulnerabilities (credentials, JWT, deserialization, access control). Provides language-specific secure implementations.
☆ 6查看技能
GitHub
vuln-patterns-languages
Language-specific vulnerability detection patterns for JavaScript/TypeScript, Python, Go, Java, Ruby, and PHP. Provides regex patterns and grep commands for common security vulnerabilities.
☆ 6查看技能
GitHub
plan-management
This skill should be used when creating, reading, or updating devloop plans in .devloop/plan.md, task tracking, progress logs, phase management, PR feedback
☆ 6查看技能
GitHub
api-design
This skill should be used for REST API, GraphQL, versioning, pagination, authentication, backend routes, web services, HTTP endpoints, server API design
☆ 6查看技能
GitHub
security-checklist
This skill should be used for OWASP, security review, authentication, XSS, SQL injection prevention, CSRF, input validation, secure coding, vulnerability scanning
☆ 6查看技能
GitHub
atomic-commits
This skill should be used for guidance on commit size, scope, and creating reviewable commits, splitting large changes, commit hygiene
☆ 6查看技能
GitHub
database-patterns
This skill should be used for database schema design, indexes, query optimization, migrations, SQL, PostgreSQL, MySQL, ORM patterns, data modeling, database relationships
☆ 6查看技能
GitHub
local-config
This skill should be used for configuring devloop project settings via .devloop/local.md, git workflow preferences, commit settings, review options
☆ 6查看技能
GitHub
pr-feedback
This skill should be used for integrating PR review comments back into devloop plan, parsing review feedback, addressing reviewer concerns
☆ 6查看技能
GitHub
vulnerability-patterns
Index of vulnerability detection pattern skills. Routes to core patterns (universal) and language-specific patterns for security scanning.
☆ 6查看技能
GitHub
project-context
Detects project tech stack, languages, frameworks, and security-relevant features. Use when you need to understand the project structure for security analysis or audit scoping.
☆ 6查看技能
GitHub
audit-report
Template and formatting guidelines for security audit reports. Provides consistent structure for findings, severity classification, ASVS mapping, and remediation recommendations.
☆ 6查看技能
默认按已收录数据中的 GitHub 仓库 Stars 排序。Stars 属于来源仓库，同一仓库的多个技能可能共享相同数值；它反映仓库关注度，不代表单个技能的安装量或质量评分。