quality-gate

前端品質閘門。自動檢查 SEO、無障礙、效能模式、UI/UX 基線。編輯 .tsx/.css 後自動觸發，push 前強制執行。修復找到的問題，不做架構變更。

Repositório: seikaikyo/dash-skills
Última atividade na origem: 7 de abril de 2026 às 16:24
Idioma detectado do SKILL.md: chinês
Estrelas: 1
Forks: 0

Opções de instalação

Por padrão, está selecionado o prompt que primeiro revisa a origem. Você pode mudar para um comando direto ou baixar uma cópia local.

Instalar com Codex ou Claude Copie este prompt, cole no Codex, Claude ou outro assistente e deixe que ele revise a página da skill e instale para você.

Um comando direto ignora o prompt de revisão. Verifique a origem antes de executá-lo.

npx skills add https://github.com/seikaikyo/dash-skills --skill quality-gate

O comando permanece em uma só linha. Role horizontalmente para revisá-lo antes de copiar.

Prefere uma cópia local? Baixe os arquivos disponíveis atualmente no SkillsMP.

Revise os arquivos de origem

Leia o SKILL.md e os arquivos complementares exibidos pelo SkillsMP antes de decidir se vai instalar.

SKILL.md

Instruções da origem · Visualização somente leitura

Voltar à pesquisa Voltar à instalação

owasp-security

Use when reviewing code for security vulnerabilities, implementing authentication/authorization, handling user input, or discussing web application security. Covers OWASP Top 10:2025, ASVS 5.0, LLM Top 10 (2025), and Agentic AI security (2026).

2026-07-30

yara-rule-authoring

Guides authoring of high-quality YARA-X detection rules for malware identification. Use when writing, reviewing, or optimizing YARA rules. Covers naming conventions, string selection, performance optimization, migration from legacy YARA, and false positive reduction. Triggers on: YARA, YARA-X, malware detection, threat hunting, IOC, signature, crx module, dex module.

2026-07-30

tgd-sketch

Throwaway HTML mockups: 2-3 design variants to compare.

2026-07-20

Ver todas deste repositório

# 必須存在的語意標籤
grep -rn "<header" src/components/     # 頁首區域
grep -rn "<main" src/                   # 主內容區
grep -rn "<nav " src/components/        # 導覽區域
grep -rn "<footer" src/components/      # 頁尾

# 所有 <button> 必須有可辨識文字或 aria-label
grep -rn "<button" src/components/ | grep -v "aria-label\|>{.*}<"

# 所有 <input> 必須有 label 或 aria-label
grep -rn "<Input\|<input" src/components/ | grep -v "aria-label\|<label"

# 語言切換按鈕必須有 aria-pressed
grep -rn "setLocale\|locale" src/components/ | grep "button" | grep -v "aria-pressed"

# 互動元素必須有 focus-visible 樣式
grep -rn "focus-visible" src/components/   # 應該有結果

# 圖片必須用 next/image（Next.js 專案）
grep -rn "<img " src/          # 不應該出現原生 img（除了 SVG inline）
grep -rn "next/image" src/     # 應該有結果（如果有圖片）

# CSS 動畫不應阻塞主執行緒
grep -rn "will-change" src/app/globals.css   # 固定背景/紋理需要
grep -rn "contain:" src/app/globals.css      # 獨立圖層需要 contain

# 字型必須用 next/font（Next.js）或 font-display: swap
grep -rn "font-display\|next/font" src/

# 不應有未使用的大型依賴
# (由 dash deps check 處理)

# 必須有 Back to Top（長頁面）
grep -rn "back-to-top\|BackToTop\|scrollTo.*top" src/

# 必須有空狀態處理
grep -rn "noResults\|no.*found\|empty" src/components/

# 必須有 loading 或 skeleton（如果有非同步資料）
grep -rn "loading\|skeleton\|Suspense" src/

# 三語 i18n 完整性（如果是多語專案）
# 檢查所有 t('key') 在三個 locale 都有對應

# 不應有 non-null assertion (!)
grep -rn "\\b!\\." src/ --include="*.tsx" --include="*.ts" | grep -v "node_modules\|!="

# Client component 的 localStorage 必須有 typeof window 防護
grep -rn "localStorage\|sessionStorage" src/ | grep -v "typeof window"

# Error boundary 檢查（React 專案）
grep -rn "ErrorBoundary\|error\\.tsx" src/

嚴重度	問題	動作
Blocking	缺 metadataBase、缺 aria-label on button/input、非 null assertion	自動修復
Warning	缺 sitemap、缺 error.tsx、原生 img 標籤	報告，不擋 push
Info	缺 JSON-LD、缺 canonical per page	報告

# 硬編碼機敏資料
grep -rn "sk-\|AKIA\|ghp_\|password\s*=\s*['\"]" src/ --include="*.tsx" --include="*.ts"

# dangerouslySetInnerHTML 未 sanitize
grep -rn "dangerouslySetInnerHTML" src/ --include="*.tsx" | grep -v "DOMPurify\|sanitize"

# target="_blank" 缺少 rel="noopener noreferrer"
grep -rn 'target="_blank"' src/ --include="*.tsx" | grep -v "noopener"

# 表單提交缺少 CSRF 防護（如果有表單）
grep -rn "<form" src/ --include="*.tsx" | grep -v "csrf\|token"

# eval / Function() 使用
grep -rn "eval(\|new Function(" src/ --include="*.tsx" --include="*.ts"

文件	適用	必要內容
`CLAUDE.md`	所有專案	專案概述、技術架構表、目錄結構、開發注意事項、後端位置（如分離）
`.interface-design/system.md`	前端專案	色彩 token、字型、間距、圓角、元件模式、手刻元件清單、禁止事項
`openspec/`	所有專案	變更管理（非架構文件，但必須存在）

# CLAUDE.md 存在
test -f CLAUDE.md

# 前端：design system 存在
test -f .interface-design/system.md || test -f wireframes/cis-design-tokens.html

# CLAUDE.md 目錄結構 vs 實際
# 抽取 CLAUDE.md 中提到的路徑，比對實際檔案系統
grep -oE 'src/[a-zA-Z0-9_/-]+' CLAUDE.md | sort -u | while read dir; do
  [ -d "$dir" ] || [ -f "$dir" ] || echo "MISSING: $dir"
done

# 新增/刪除檔案後，CLAUDE.md 是否也更新
git diff --cached --diff-filter=ADR --name-only | head -10
git diff --cached --name-only | grep CLAUDE.md

name	quality-gate
description	前端品質閘門。自動檢查 SEO、無障礙、效能模式、UI/UX 基線。編輯 .tsx/.css 後自動觸發，push 前強制執行。修復找到的問題，不做架構變更。
source	self
updated	"2026-04-07T00:00:00.000Z"

name	quality-gate
description	前端品質閘門。自動檢查 SEO、無障礙、效能模式、UI/UX 基線。編輯 .tsx/.css 後自動觸發，push 前強制執行。修復找到的問題，不做架構變更。
source	self
updated	"2026-04-07T00:00:00.000Z"

quality-gate

Opções de instalação

Revise os arquivos de origem

Quality Gate (前端品質閘門)

When to Use

檢查清單

1. SEO (Search Engine Optimization)

Quality Gate (前端品質閘門)

When to Use

檢查清單

1. SEO (Search Engine Optimization)

2. Accessibility (無障礙)

3. Performance (效能)

4. UI/UX 基線

5. Reliability (穩定度)

執行流程

Blocking vs Warning

6. Security (安全性)

7. Architecture Documentation (SA/SD 同步)

不做的事

quality-gate

Informações da origem

Opções de instalação

Revise os arquivos de origem

Mais deste repositório

Quality Gate (前端品質閘門)

When to Use

檢查清單

1. SEO (Search Engine Optimization)

Mais deste repositório

Quality Gate (前端品質閘門)

When to Use

檢查清單

1. SEO (Search Engine Optimization)

2. Accessibility (無障礙)

3. Performance (效能)

4. UI/UX 基線

5. Reliability (穩定度)

執行流程

Blocking vs Warning

6. Security (安全性)

7. Architecture Documentation (SA/SD 同步)

不做的事