HoangNguyen0403/agent-skills-standard - Page 9

plan-feature

Plan a feature from BRD-lite brief or clear intent into PRD (What), decisions, implementation plan, and task slices.

Langue du texte source : anglais

publish-notes

Draft user-facing release notes, store changelogs, and internal publish summaries.

Langue du texte source : anglais

retro-learn

Convert delivery findings into skill, eval, workflow, and documentation improvements.

Langue du texte source : anglais

review-ticket

Review a ticket or PR through focused specialist lenses: scope, architecture, security, tests, AC coverage, and PR metadata.

Langue du texte source : anglais

security-test

Fast, continuous DevSecOps pipeline for Pull Requests and active branches. Runs SAST, SCA, and secrets detection to catch vulnerabilities before they merge.

Langue du texte source : anglais

session-report

Capture delivery evidence, commands, changed files, blockers, and standards feedback after a work session.

Langue du texte source : anglais

skill-benchmark

Benchmark AI skill effectiveness by measuring implementation quality against legacy constraints.

Langue du texte source : anglais

traceability-audit

Map requirements, acceptance criteria, implementation, tests, and release artifacts into one traceability report.

Langue du texte source : anglais

uat-signoff

Walk a business/UAT approver through a plain-language demo of a verified feature and capture business acceptance signoff.

Langue du texte source : anglais

update-docs

Automated workflow to detect and fix missing documentation

Langue du texte source : anglais

verify-bug

Post-merge UAT verification workflow. Walks JIRA reproduce steps, performs comparative audits (Before/After), attaches evidence to JIRA, and transitions status on PASS.

Langue du texte source : anglais

verify-work

Verify feature, bug, UI, API, mobile, security, or deployment work against acceptance criteria.

Langue du texte source : anglais

zephyr-coverage-analysis

Analyze Zephyr test case coverage for a Jira user story and produce a QE management report with metrics, risk scoring, and prioritized recommendations.

Langue du texte source : anglais

specialist-ac-verifier

Maps acceptance criteria to implementation evidence, tests, and scope creep. Use during review when a diff, PR, ticket, or story includes numbered ACs.

Langue du texte source : anglais

specialist-architecture-guard

Audits PR diffs for architecture boundary violations, design simplicity, dependency drift, and established-pattern mismatches. Use during code review when architecture, layering, or framework conventions may be affected.

Langue du texte source : anglais

specialist-aspm-correlator

Application Security Posture Management persona. Correlates findings from SAST, DAST, and SCA tools, deduplicates noise, maps vulnerabilities to specific code commits, and generates targeted remediation PRs.

Langue du texte source : anglais

specialist-codebase-scout

Explores codebase structure, affected files, blast radius, related tests, and local conventions for a focused topic. Use when review or planning needs structural lookup without bloating main context.

Langue du texte source : anglais

specialist-confluence-searcher

Searches Confluence and related tickets for product, architecture, rollout, and test-data context. Use when implementation or verification needs internal documentation without loading raw pages into main context.

Langue du texte source : anglais

specialist-jira-analyst

High-density JIRA analysis persona. Extracts reproduce steps, ACs, and market requirements with zero-hallucination rigor.

Langue du texte source : anglais

specialist-logic-hacker

Red Team persona for Business Logic and Auth manipulation. Generates and executes stateful fuzzing scripts (Playwright/Python) to test RBAC bypasses, BOLA/IDOR, race conditions, and complex multi-step transaction flaws.

Langue du texte source : anglais

specialist-mobile-reverser

Deep Mobile Security Red Team persona. Executes OWASP MASTG procedures including APK/IPA decompilation, Frida dynamic hooking, biometric bypasses, and local database decryption.

Langue du texte source : anglais

specialist-pr-commenter-batch

Posts sanitized batches of PR review comments or replies through configured review tooling. Use after review-ticket when findings are approved for publication.

Langue du texte source : anglais

specialist-pr-reviewer

Summarizes GitHub PR, GitLab MR, or Azure DevOps PR metadata, review threads, changed files, and template completeness. Use during review-ticket or code-review workflows when PR/MR context exists.

Langue du texte source : anglais

specialist-security-reviewer

High-density security audit persona. Enforces OWASP Top 10, Vibe Security, trust gating, and runtime hardening for code and agentic review flows.

Langue du texte source : anglais

specialist-tdd-implementer

Strict TDD specialist. Enforces RED -> GREEN -> REFACTOR loop, minimal implementation, and zero-noise test conventions.

Langue du texte source : anglais

specialist-zephyr-scanner

Finds Zephyr Scale test cases linked or relevant to Jira stories, ACs, modules, and release risks. Use for coverage analysis and traceability checks.

Langue du texte source : anglais

common-business-requirements

Standardize BRD and BRD-lite discovery for business goals, stakeholder impact, current-to-future state, and measurable value outcomes. Use when creating BRD, business case, project justification, ROI narrative, or AS-IS to TO-BE scope.

Langue du texte source : anglais

common-software-requirements

Standardize SRS and FRS specifications for technical behavior, interfaces, data contracts, quality constraints, and verification mapping. Use when writing SRS, functional specification, system behavior requirements, API/data contracts, or non-functional…

Langue du texte source : anglais

common-exploit-verification

Enforce "No Exploit, No Report" policy with PoC construction standards, false-positive filtering, and evidence collection per vulnerability class across backend, frontend, and mobile. Use when validating security findings, constructing exploit proofs,…

Langue du texte source : anglais

common-pentest-methodology

PTES-aligned penetration testing methodology for backend, frontend, and mobile. Provides attack taxonomy, exploit techniques per vulnerability class, and platform-specific test matrices. Use when executing pentest workflow, planning security assessments,…

Langue du texte source : anglais

quality-engineering-appium-mcp

Drives iOS/Android mobile devices via Appium MCP. Use for verifying mobile bugs, E2E tests, and navigating real device clouds (LambdaTest/BrowserStack).

Langue du texte source : anglais

specialist-integration-test-generator

Generates one integration/E2E test from an approved test case spec using existing project patterns. Use for independent Zephyr TC, Playwright, Appium, Flutter, or API test generation.

Langue du texte source : anglais

specialist-tc-creator

Creates one test case in Zephyr or another test-management system from an approved structured spec. Use for bulk TC creation by spawning one independent specialist per TC.

Langue du texte source : anglais

caveman-commit

Ultra-compressed commit message generator. Cuts noise from commit messages while preserving intent and reasoning. Conventional Commits format. Subject ≤50 chars, body only when "why" isn't obvious. Use when user says "write a commit", "commit message",…

Langue du texte source : anglais

caveman-compress

Compress natural language memory files (CLAUDE.md, todos, preferences) into caveman format to save input tokens. Preserves all technical substance, code, URLs, and structure. Compressed version overwrites the original file. Human-readable backup saved as…

Langue du texte source : anglais

caveman-review

Ultra-compressed code review comments. Cuts noise from PR feedback while preserving the actionable signal. Each comment is one line: location, problem, fix. Use when user says "review this PR", "code review", "review the diff", "/review", or invokes…

Langue du texte source : anglais

caveman

Ultra-compressed communication mode. Cuts token usage ~75% by speaking like caveman while keeping full technical accuracy. Supports intensity levels: lite, full (default), ultra, wenyan-lite, wenyan-full, wenyan-ultra. Use when user says "caveman mode", "talk…

Langue du texte source : anglais

javascript-best-practices

Idiomatic JavaScript patterns and conventions for maintainable code.

Langue du texte source : anglais

javascript-language-patterns

Modern JavaScript (ES2022+) patterns for clean, maintainable code.

Langue du texte source : anglais

javascript-tooling

Development tools, linting, and testing for JavaScript projects.

Langue du texte source : anglais