supabase
Handles the full Supabase workflow from schema changes to deployment, with built-in security guardrails that catch common traps like RLS...
tdd-workflow
TDDワークフローを強制し、テストファースト開発を支援します。新機能実装時に自動起動し、Red-Green-Refactorサイクルを確実に実行します。
Full skill instructions
このスキルは、Constitution Article 1: Test-First Imperative を強制し、テスト駆動開発(TDD)ワークフローを支援します。
以下の状況で自動起動します:
目的: 失敗するテストを先に作成する
テストファイルの作成/特定
test_<機能名>.pytests/ ディレクトリテストケースの設計
テストの実行と失敗確認
uv run pytest tests/test_<機能名>.py -v
ユーザー承認
目的: テストを通過する最小限のコードを実装する
実装ファイルの作成
テストの実行と成功確認
uv run pytest tests/test_<機能名>.py -v
品質チェック
uv run ruff check --fix . && uv run ruff format . && uv run mypy .
目的: テストを維持しながらコードを改善する
コードの改善
テストの再実行
uv run pytest tests/test_<機能名>.py -v
全テストの確認
uv run pytest
| 実装ファイル | テストファイル |
|---|---|
src/auth.py | tests/test_auth.py |
src/article.py | tests/test_article.py |
src/session.py | tests/test_session.py |
# tests/test_auth.py
import pytest
class TestLogin:
"""ログイン機能のテスト"""
def test_login_success(self) -> None:
"""正常なログインが成功すること"""
...
def test_login_invalid_credentials(self) -> None:
"""無効な認証情報でエラーになること"""
...
class TestLogout:
"""ログアウト機能のテスト"""
def test_logout_success(self) -> None:
"""正常なログアウトが成功すること"""
...
test_<機能>_<状況>_<期待結果>test_login_with_valid_credentials_returns_sessionStep 1: テスト作成(Red)
# tests/test_auth.py
import pytest
from src.auth import login
class TestLogin:
def test_login_success(self) -> None:
"""正常なログインが成功すること"""
result = login("valid_user", "valid_password")
assert result.success is True
assert result.session_id is not None
def test_login_invalid_password(self) -> None:
"""無効なパスワードでエラーになること"""
with pytest.raises(AuthenticationError):
login("valid_user", "wrong_password")
Step 2: テスト失敗確認
uv run pytest tests/test_auth.py -v
# FAILED - ImportError: cannot import name 'login' from 'src.auth'
Step 3: ユーザー承認
「このテストケースで進めてよろしいですか?」
Step 4: 最小実装(Green)
# src/auth.py
from dataclasses import dataclass
@dataclass
class LoginResult:
success: bool
session_id: str | None
class AuthenticationError(Exception):
pass
def login(username: str, password: str) -> LoginResult:
if password == "wrong_password":
raise AuthenticationError("Invalid credentials")
return LoginResult(success=True, session_id="session_123")
Step 5: テスト成功確認
uv run pytest tests/test_auth.py -v
# PASSED
Step 6: リファクタリング(Refactor)
必要に応じてコードを改善
実装開始前に確認:
実装完了時に確認:
Handles the full Supabase workflow from schema changes to deployment, with built-in security guardrails that catch common traps like RLS...
Comprehensive guides and best practices for Neon Serverless Postgres, covering setup, connection methods, authentication, and platform APIs.
Guide for setting up and using Firebase Authentication. Use this skill when the user's app requires user sign-in, user management, or secure data access using auth rules.
A skill to evaluate how secure Firestore security rules are. Use this when Firestore security rules are updated to ensure that the generated rules are extremely secure and robust.
Official skill for integrating Firebase AI Logic (Gemini API) into web applications. Covers setup, multimodal inference, structured output, and security.
Complete Better Auth server and client setup with database adapters, session management, plugins, and security configuration.
Deploy and manage projects on Vercel using token-based authentication. Use when working with Vercel CLI using access tokens rather than interactive login — e.g. "deploy to vercel", "set up vercel", "add environment variables to vercel".
Complete Cloudflare platform integration with decision trees for compute, storage, AI, networking, security, and infrastructure-as-code.
Run Azure compliance and security audits with azqr plus Key Vault expiration checks. Covers best-practice assessment, resource review, policy/compliance validation, and security posture checks. WHEN: compliance scan, security audit, BEFORE running azqr (compliance cli tool), Azure best practices, Key Vault expiration check, expired certificates, expiring secrets, orphaned resources, compliance assessment.
Send, read, and manage Gmail messages, drafts, labels, and account settings.
Comprehensive website auditing across 230+ rules in 21 categories including SEO, performance, security, and accessibility.
Shared authentication, CLI syntax, and output formatting patterns for gws Google Workspace commands.
Discover your celebrity doppelgänger with StarByFace!
GeoSpy: Pricing, Features, FAQs, and Alternatives for AI Teams
Detect AI-generated voices to protect against audio fraud.
Ensure Your Content's Originality with AI Plagiarism Checker
Upscale images by 400% without quality loss
Protect your social media from copyright disputes
Accurately Detect AI-Generated Content with TheChecker.AI
Chrome extension that detects and flags AI-generated content