Security checklist for C#/.NET backend (ASP.NET Core, EF Core, Event Sourcing). Covers secrets management, input validation, SQL injection, authentication, authorization, rate limiting, security headers, sensitive data handling, Problem Details (RFC 7807), and event sourcing security. Invoked via /dev-security (unified entry point) — not directly.

2026-03-23

dev-tdd-backend

软件质量保证分析师与测试员

Test-driven development workflow for C#/.NET using xUnit, NSubstitute, and event sourcing (EventSourcing). Covers aggregate testing, specification testing, projection testing, and proper test isolation. Invoked via /dev-tdd (unified entry point) — not directly.

2026-03-23

dev-verification-backend

软件质量保证分析师与测试员

Post-change verification for C#/.NET backend code — build, Roslyn analyzers, dotnet format, xUnit tests with coverage, NuGet vulnerability scan, and diff review. Invoked via /dev-verify (unified entry point) — not directly.

2026-03-23

meta-skill-catalog

软件开发工程师

Maintains the skill catalog (catalog.json) with metadata about all installed skills. Use when adding, removing, or auditing skills. Invoke with /meta-skill-catalog to see current inventory, check for issues, or rebuild the catalog from disk.

2026-03-23