laitszkin/enhance-existing-features
skills/enhance-existing-features/SKILL.md
在既有系統上安全地增強或調整產品行為。 先讀懂受影響模組，再判斷直接實作或走 spec。 非平凡變更必須通過 test-case-strategy。
$ install --global
skillsauthnpx skillsauth add laitszkin/apollo-toolkit enhance-existing-featuresInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: May 22, 2026, 6:42 AM179.3s4 files scanned
SKILL.md
- name:
- enhance-existing-features
- description:
- >-
技能目標
在不打亂既有系統邊界的前提下，為 brownfield 專案安全地增強功能或調整行為。 透過合適的 spec 流程與測試策略，將風險控制在可驗證範圍內。
驗收條件
- 變更範圍明確：已讀懂受影響模組、入口點、整合邊界與變更爆炸半徑。
- 已正確判斷直接實作或必須先走
spec，並在不需要 spec 時給出明確理由。 - 每個非平凡變更都經過
test-case-strategy，留下清楚的 oracle、驗證方式與通過證據。 - 若使用 spec：批准、實作、回填與計劃文件狀態同步全部完成。
- 若未使用 spec：最終摘要足以說明風險、測試結果與剩餘限制。
test-case-strategy不可用時必須停止；需要 spec 但spec不可用時必須停止。
工作流程
- 完整閱讀受影響模組、資料流、整合點與現有測試。明確界定變更的爆炸半徑。
- 判斷是否需要 spec：涉及新的或改變使用者可見行為、跨模組協調、高風險敏感流程、重大歧義時走
spec。不需 spec 時明確說出理由。 - 若需要 spec，必須等批准後才能改產品程式碼。
- 查閱變更依賴的官方文件或 API spec。以最小差異實作需求。不順手做額外重構或範圍擴張。
- 使用
test-case-strategy選擇測試組合，跑測試並修正失敗。 - 若使用 spec，回填所有計劃文件。若未使用，輸出簡潔的結果摘要、測試證據與剩餘限制。
使用範例
- 「新增一套影響 API、資料庫與 UI 的權限模型」→ 先走
spec，批准後再實作，並補上跨層測試。交付物包含已批准的 spec、通過的測試證據、回填完成的計劃文件。 - 「修正分頁 off-by-one，讓行為回到 README 描述」→ 不開 spec，直接修復並加回歸測試。交付物為修復後的代碼與測試通過證據。
參考資料索引
-
spec：需要書面批准時的 spec 流程。 -
test-case-strategy：非平凡變更的測試選型與 oracle 設計。 -
commit：使用者要求提交或推送時的最終交付流程。
Related Skills
laitszkin/create-skill
development
VerifiedTrustedCommunity
Guides the agent through creating a new Agent Skill from scratch. Use when the user wants to build a skill, create a new skill, scaffold a skill directory, or author a SKILL.md. Do NOT use for optimising or rewriting existing skills — use 'optimise-skill' for that. Do NOT use for editing files that are already part of a skill. Do NOT use for creating non-skill content like documentation, scripts, or project files.
5SKILL.mdUpdated Jul 13, 2026
laitszkin/create-skill
development
VerifiedTrustedCommunity
Guides the agent through creating a new Agent Skill from scratch. Use when the user wants to build a skill, create a new skill, scaffold a skill directory, or author a SKILL.md. Do NOT use for optimising or rewriting existing skills — use 'optimise-skill' for that. Do NOT use for editing files that are already part of a skill. Do NOT use for creating non-skill content like documentation, scripts, or project files.
5SKILL.mdUpdated Jul 11, 2026
laitszkin/review-pr
development
VerifiedTrustedCommunity
Review a pull request — interactive PR selection via `gh`, 4-dimension code review (hallucinated code, architecture, performance, test validity), then post severity-graded comments with fix suggestions on the PR. Not for spec-based review — use `review` instead.
5SKILL.mdUpdated Jun 11, 2026
laitszkin/version-release
tools
VerifiedTrustedCommunity
協助完成自動化版本發佈。同步文檔、更新版本號、推送 tag 並建立 GitHub Release。
5SKILL.mdUpdated May 29, 2026