[QA Process · ISO 31000 + ISTQB CTFL v4.0] Risk-based test prioritization — builds a risk matrix (likelihood × impact), ranks test areas by priority, and flags critical paths for…
Security scanning templates and checklists for OWASP Top 10, authentication, authorization, data protection. Use when conducting security testing or vulnerability assessment.
Test security posture — auth flows, authorization boundaries, injection paths, session handling, and misconfiguration checks — with adversarial scenarios.
[QA Process · ISO 25010 + ISTQB CTFL v4.0] Test Strategy document creation — defines scope, risk appetite, test approach, coverage goals, and tool selection for the project.
Systematically test web applications for functionality, security, and usability issues using browser automation.
Gestión del QA del proyecto GitHooks: ejecutar herramientas de análisis estático y tests, interpretar y corregir violaciones, y garantizar que el código está limpio antes de…
Operations, runtime configuration, security, and device-local health of QECTOR deployments. The library path uses compat_report and get_license_info; any Workbench health tools…
Use when building the robustness suite and online appendix for a Quarterly Journal of Economics (QJE) manuscript — the extensive checks QJE referees expect, exploiting the…
Integrate QPay — Mongolia's primary QR payment system — into a developer's project so they can accept MNT payments through Khan Bank, Golomt, State Bank, Xac Bank and other…
Generate QR codes for URLs, WiFi credentials, vCards, email, SMS, and plain text.
Air-gapped credential bridge using QR codes. Use when transferring credentials between networked and air-gapped devices via QR codes.
Checklist transversal de qualificação humana para atos notariais: capacidade, legitimidade, licitude, forma, identidade, união estável, representação e atualidade de poderes,…
Wirtschaftsprüfer: qualitaetskontrolle und inspektion - Rechtsprechungscheck, stärkste Gegenansicht und Red-Team-Korrektur; mit Live-Normencheck, Kammerlogik, Verhältnismäßigkeit,…
Steuerberater: qualitaetsmanagement fristen - Rechtsprechungscheck, stärkste Gegenansicht und Red-Team-Korrektur; mit Live-Normencheck, Kammerlogik, Verhältnismäßigkeit, Belegplan…
Anwälte: qualitaetsmanagement fristen und vier augen - Rechtsprechungscheck, stärkste Gegenansicht und Red-Team-Korrektur; mit Live-Normencheck, Kammerlogik, Verhältnismäßigkeit,…
Notare: qualitaetsmanagement im notariat - Rechtsprechungscheck, stärkste Gegenansicht und Red-Team-Korrektur; mit Live-Normencheck, Kammerlogik, Verhältnismäßigkeit, Belegplan…
Qualitaet installierter Skills prüfen: Normaktualitaet, Description-Qualitaet, Struktur-Compliance. Normen: technisch/intern, SKILL.md-Schema.
Triage SonarQube findings by separating blockers from lower-priority issues across bugs, vulnerabilities, code smells, coverage, duplication, and security hotspots.
5-level verification pyramid: static→unit→Playwright E2E (homepage-first, 6bp)→AI visual→post-deploy. 8-check quality gate.
Page quality audits for DOM complexity, CSS architecture, security vulnerabilities, and SEO/meta tag validation.
Run comprehensive quality checks including linting, type checking, tests, and security audits before commits or deployments — from AI-Vibe-Prompts
Run comprehensive quality checks including linting, type checking, tests, and security audits before commits or deployments — from bg-szy/TOP-SKILLS
Teach agents to define and enforce CI quality gates for diff coverage, flaky tests, performance budgets, security thresholds, and regression health.
Enforces minimum quality thresholds in CI including code coverage, linting, type checking, and security scanning. Provides required checks, PR rules, and automated enforcement.
Launch quality subagents in parallel using Claude Code 2.1+ native Task tool. Includes ralph-security for OWASP validation and ralph-frontend for WCAG checks.
Deep code review with web research to verify against latest ecosystem. Use when user says 'double check against latest', 'verify versions', 'check security', 'review against…
Deep code review with web research. USE WHEN user says 'double check against latest', 'verify versions', 'check security'.
Use when a user wants setup, wizard guidance, evaluation, improvement, or paired skill/CLI update help for quality management of a project/entity or one of its components/areas.
Execute GGUF quantization with imatrix protection, perform statistical benchmark evaluation with error bars, generate academic-style methodology documentation, and create…
Automate the full QuarkPanTool → mswnlz GitHub content publishing pipeline. Use when the user provides Quark share URLs and wants: (1) create a batch folder in Quark Drive, (2)…
Quarkus Security best practices for authentication, authorization, JWT/OIDC, RBAC, input validation, CSRF, secrets management, and dependency security.
Verification loop for Quarkus projects: build, static analysis, tests with coverage, security scans, native compilation, and diff review before release or PR.
Integration guide for using the Quartz Nostr KMP library in external projects. Use when: (1) adding Quartz as a Gradle dependency, (2) setting up NostrClient with WebSocket, (3)…
Quebec residential tenancy — the rights and obligations of tenants (lessees) and landlords (lessors) under the Civil Code of Québec, adjudicated by the Tribunal administratif du…
Für Quellenhygiene im Beamten- und Richterrecht: prüft Ergebnis, Beweislast und Gegenposition; Ergebnis: Gegenprüfung mit Beweis- und Fristencheck.
Quellenhygiene-Red-Team für Beamten- und Richterrecht: erkennt verrutschte Fundstellen, private Datenbankzitate, falsche Entscheidungsdaten, Landesrechtsfallen und alte Rechtslage.
Römisches Recht: Quellenkritik Digesten Und Institutionen. Geführter Fachmodul mit Quellenlogik, Prüfroutine, Red-Team-Fragen und verwertbarem Output.
Compose + run SQL against a Postgres-backed fork's app DB — psql mechanics, psql variables vs driver :params, SQLite→Postgres dialect traps, read-only diagnostics, paste-ready…
Use ClickHouse's official MCP server when an assistant needs schema-aware, reviewable analytics access to ClickHouse through bounded tools instead of ad hoc database credentials.
Use DBHub to expose guarded, token-efficient database inspection and SQL tools to MCP clients across Postgres, MySQL, SQL Server, MariaDB, and SQLite.
Query token security audit to detect scams, honeypots, and malicious contracts before trading. Returns comprehensive security analysis including contract risks, trading risks, and…
Auto-fill security questionnaires (SIG Lite, CAIQ, Enterprise) using scan data and policy documents.
Analyzes vendor security questionnaire responses. Identifies red flags, gaps, and areas requiring follow-up. Supports SIG, CAIQ, and custom questionnaires.
Use when a security questionnaire response set is ready for final review against sensitive details, unsupported claims, source gaps, and approval readiness.
Use when security questionnaire material, customer attachments, NDA context, or control details need data and confidentiality screening before drafting.
Use when implementing new features in Quetrex. Ensures TDD, TypeScript strict mode, Next.js App Router patterns, ShadCN UI components, and security best practices are followed.
Lightning-fast quality check using parallel command execution. Runs theater detection, linting, security scan, and basic tests in parallel for instant feedback on code quality.
Scan any token for security risks, honeypots, and scams using Quick Intel's contract analysis API. Use when: checking if a token is safe to buy, detecting honeypots, analyzing…
QuickNode security basics — blockchain RPC and Web3 infrastructure integration. Use when working with QuickNode for blockchain development.
Run a quick security scan on a target. Consults the Brain first, validates scope, runs passive recon + vuln scan in parallel.
Ready Agent 1 scans your repo for agent-readiness — a deterministic, cited score (Level 1–5 across Style & Validation, Build System, Testing, Documentation, Dev Environment,…
Motor audita akademskog .docx-a, faze A–G: integritet, citati i literatura, brojke i statistika, hipoteze, tvrdnja naspram izvora, jezik, Word polja, metapodaci, sigurni ispravci.
Motor izrade predajnog .docx-a iz markdown rukopisa: petlja do fiksne točke paginacije, živa polja (TOC/SEQ/REF), nedjeljivi prikazi, sekcije i numeracija, provjera prije predaje.
Orkestrator faza rada (plan, pisanje, audit, predaja) kroz Workflow tool nad stvarnim katedra-lite skriptama i satelitima: paralelni audit s lens budgetom, povratak na raniju…
Use for authorized RF/SDR security research including signal identification, replay feasibility study in shielded labs, and wireless protocol analysis outside classic Wi-Fi.
CRITICAL - Use when securing Rails applications - XSS, SQL injection, CSRF, file uploads, command injection prevention
Security baseline for Ruby on Rails 8 apps — strong params (and their common bypass mistakes), CSRF for browser apps, CSRF for SPAs, Brakeman + bundler-audit + Dependabot, Rails…
Performs security audits and vulnerability assessments on Ruby on Rails application code. Use when reviewing Rails code for security risks, assessing authentication or…
Use when Pedro wants to run the RAIOX channel analysis — "roda o raiox", "/raiox", "analisa o canal X", "atualiza os números do massini", "onboarda o canal Y no raiox", "pergunta…
Rakiplerin içeriklerini (Instagram, TikTok) ve reklam stratejilerini (Meta Ads vb.) analiz ederek içerik boşluklarını (content gap) bulmaya yarayan araştırma motoru.