helpers/skills/unit-test-project-conformant/SKILL.md
Use this skill to write unit tests that strictly conform to the project's existing testing structure, patterns, and style by learning from similar tests before writing anything new.
npx skillsauth add opendatahub-io/ai-helpers unit-test-project-conformantInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
This skill ensures the agent does not invent test structure and instead learns how the project already tests similar code, then writes the new test in the same style, location, and pattern.
The goal is for the new test to be indistinguishable from existing tests.
Before writing any test:
You must examine at least 2–3 similar tests before proceeding.
From the discovered tests, learn:
You are learning the project’s testing contract.
Follow existing structure exactly:
Do not create a new test file unless similar tests do.
Mirror the project’s style for:
Do not introduce new libraries, helpers, or patterns.
If similar methods:
Then you must follow the same pattern.
Do not create standalone unit tests if the project does not.
Match the project’s expectations:
Do not over-test compared to existing patterns.
Search for and reuse:
Do not recreate logic that already exists.
Only after completing all discovery steps should you write the test.
The result should look like it was written by the same author as the surrounding tests.
Before finishing, confirm:
/unit-test-project-conformant write a test for the parse_config() function in src/config.py
/unit-test-project-conformant add test coverage for the new validate_input method in models/user.py
Use the ask questions tool if you need to clarify requirements with the user.
tools
Use this skill to filter a pre-fetched set of Hacker News stories down to those that report supply-chain security threats relevant to software developers — including malicious packages on npm or PyPI, compromised developer tooling, and attacks targeting source code repositories or CI/CD infrastructure. Reads stories from stories.json in the workspace, performs semantic analysis (fetching HN threads when the title alone is ambiguous), and writes the stories worth alerting on to findings.json.
development
Run hexora static analysis on a Python package repository to detect suspicious code patterns, then triage findings with deterministic rules and AI reasoning to produce a structured risk report section.
development
Inspect recent git history of a Python package repository for suspicious commits touching supply-chain-sensitive files, then triage findings with AI reasoning to produce a structured risk report section.
development
Scan a Python package repository for compiled/binary files using Fromager-style detection and malcontent YARA analysis, then triage findings with deterministic rules and AI reasoning to produce a structured risk report section.