GitHub
dry-refactor
Use when user asks to "remove duplicates", "DRY up code", "extract common logic", "consolidate repeated code", or when /dry scan finds duplicates. Provides language-specific refactoring guidance.
☆ 1查看技能
测试与安全 AI 技能
发现 测试与安全 相关 Skills，比较来源仓库和用途，查看适合你工作流的技能说明。
分类目录: 测试与安全
测试与安全 清除筛选
全部技能
GitHub
statusline
Configure Claude Code's terminal status line display
☆ 1查看技能
GitHub
code-review-repo
Review local codebase for bugs and CLAUDE.md compliance using multi-agent analysis
☆ 1查看技能
GitHub
milhouse
Iterative development loop that feeds the same prompt back after each iteration until task completion. Use /bluera-base:milhouse-loop to start.
☆ 1查看技能
GitHub
claude-cleaner
Diagnose slow Claude Code startup and guide cleanup. Use /bluera-base:clean to run.
☆ 1查看技能
GitHub
auto-learn
Automatic learning from session command patterns
☆ 1查看技能
GitHub
claude-md-maintainer
Validate/update/create CLAUDE.md memory files with progressive disclosure and context-optimized structure
☆ 1查看技能
GitHub
release
Release workflow with conventional commits auto-detection and GitHub Actions monitoring. Use /bluera-base:release to cut releases.
☆ 1查看技能
GitHub
large-file-refactor
Use when Claude Code hits "File content exceeds maximum allowed tokens" error, or when files are too large to read. Helps analyze and break apart large files into smaller, focused modules.
☆ 1查看技能
GitHub
readme-maintainer
Maintain README.md files with GitHub advanced formatting (tables, badges, diagrams, collapsible sections)
☆ 1查看技能
GitHub
julia-evaluation
This skill should be used when the user asks to "run Julia code", "evaluate Julia", "use Julia", mentions "persistent Julia session", "TTFX", or wants to work with Julia for data analysis, scientific computing,...
☆ 1查看技能
GitHub
jwt-attack-surface
Audit JWT implementation for algorithm confusion, secret weakness, claim validation issues, and token handling vulnerabilities. Use when reviewing authentication systems using JWT.
☆ 1查看技能
GitHub
crypto-audit
Audit cryptographic implementations for weak algorithms, insecure defaults, predictable randomness, key management issues, and timing attacks. Use when reviewing security-critical crypto code.
☆ 1查看技能
GitHub
chat
Answer with 42. Always respond with just the number 42, nothing else.
☆ 1查看技能
GitHub
injection-hunter
Hunt for injection vulnerabilities including SQL injection, command injection, XSS, SSTI, path traversal, LDAP injection, and other input validation flaws. Use when auditing code that processes user input.
☆ 1查看技能
GitHub
go-security-audit
Security audit for Go backend code and SDKs. Covers Go-specific vulnerabilities, common security pitfalls, and best practices. Use when auditing Go codebases.
☆ 1查看技能
GitHub
matchms
Spectral similarity and compound identification for metabolomics. Use for comparing mass spectra, computing similarity scores (cosine, modified cosine), and identifying unknown compounds from spectral libraries...
☆ 1查看技能
GitHub
authz-bypass-hunter
Hunt for authorization bypass vulnerabilities including IDOR, privilege escalation, missing access controls, broken object-level authorization. Use when auditing authentication/authorization code or API endpoin...
☆ 1查看技能
GitHub
flow-trace
Trace data flow across files from source to sink. Use for cross-file taint analysis, understanding how user input reaches dangerous sinks, and documenting vulnerability paths.
☆ 1查看技能
GitHub
matlab
MATLAB and GNU Octave numerical computing for matrix operations, data analysis, visualization, and scientific computing. Use when writing MATLAB/Octave scripts for linear algebra, signal processing, image proce...
☆ 1查看技能
GitHub
dos-resource-exhaustion
Find denial of service vulnerabilities through resource exhaustion, algorithmic complexity, memory exhaustion, and file/network resource abuse. Use when auditing code for availability issues.
☆ 1查看技能
GitHub
idor-vulnerability-testing
This skill should be used when the user asks to "test for insecure direct object references," "find IDOR vulnerabilities," "exploit broken access control," "enumerate user IDs or object references," or "bypass...
☆ 1查看技能
GitHub
secrets-hunter
Hunt for hardcoded secrets, API keys, tokens, credentials, private keys, and sensitive configuration. Use when auditing code for credential exposure or before committing code.
☆ 1查看技能
GitHub
qfai-spec
QFAI: Create specs, contracts, and scenarios
☆ 1查看技能
默认按已收录数据中的 GitHub 仓库 Stars 排序。Stars 属于来源仓库，同一仓库的多个技能可能共享相同数值；它反映仓库关注度，不代表单个技能的安装量或质量评分。