link-validation
Universal link validation using lychee for Claude Code sessions. Runs at session end to detect broken links and path policy violations.
Universal link validation using lychee for Claude Code sessions. Runs at session end to detect broken links and path policy violations.
Security-first bash scripting patterns for 2025 (mandatory validation, zero-trust)
Better Auth authentication flows for TypeScript apps. Use when enabling email/password auth, configuring social providers, or implementing sign-up, sign-in, and verification flows.
Verify claims in generated output against sources. Use as a separate pass AFTER content generation to catch hallucinations. Critical constraint - cannot be reliably combined with generation in a single pass.
Full codebase security audit with OWASP Top 10 guidance, language-specific patterns, checklists, and fix examples. Use for comprehensive audits split by module/area.
Security best practices and patterns for Vigil Guard v2.0.0 development. Use when implementing authentication, handling secrets, validating input, preventing injection attacks, managing CORS, ensuring secure coding practices, 3-branch detection security, or implementing security audit fixes.
CI security scanning: secrets, deps, SAST, triage, expiring exceptions
Security controls and structured logging implementation. Use when security logging guidance is required.
Modern PowerShell security practices including SecretManagement, JEA, WDAC, and credential protection
Development guide for @rytass/secret base package (密鑰基底套件開發指南). Use when creating new secret adapters (新增密鑰 adapter), understanding base interfaces, or extending secret management functionality. Covers SecretManager abstract class and implementation patterns. Keywords: secret adapter, 密鑰 adapter, 開發指南, vault, credential, key management
Secure coding practices and defensive programming patterns for building security-first applications. Use when implementing authentication, handling user input, managing sensitive data, or conducting secure code reviews.
Use when creating new skills, editing existing skills, or verifying skills work before deployment - applies TDD to process documentation by testing with subagents before writing, iterating until bulletproof against rationalization
Use when writing tests, debugging test failures, mocking dependencies, or using fake timers. Covers Vitest patterns, mock factories, and promise rejection handling.
Windows and Git Bash testing compatibility guide for Vitest, Playwright, and MSW with path conversion patterns
Execute and generate Jest tests for JavaScript/TypeScript projects with support for unit, integration, and E2E testing
Comprehensive TDD patterns and practices for all programming languages, eliminating redundant testing guidance per agent.
Create Buck2 tests with local resources (processes, services, databases) using LocalResourceInfo and ExternalRunnerTestInfo. Use when tests need external dependencies like databases, HTTP servers, message queues, or Unix sockets that Buck2 should manage automatically. (project)
Comprehensive web application testing patterns with Playwright selectors, wait strategies, and best practices
Complete Python testing system. PROACTIVELY activate for: (1) pytest fundamentals, (2) Fixtures and scopes, (3) Parameterized tests, (4) Mocking with pytest-mock, (5) Async testing with pytest-asyncio, (6) Coverage configuration, (7) FastAPI testing with httpx, (8) Property-based testing with hypothesis, (9) Snapshot testing. Provides: pytest patterns, fixture examples, mock setup, coverage config. Ensures comprehensive test coverage with best practices.
Execute and generate pytest tests for Python projects with fixtures, parametrization, and mocking support
Automatically detect test frameworks (Jest, pytest, RSpec, xUnit) in projects by analyzing configuration files and dependencies