Security & Testing Claudeスキル

Security Testing

Hardens software applications by providing comprehensive security auditing, vulnerability scanning, and penetration testing guidance.

Authentication & Session Security

Secures applications by implementing JWT validation, OAuth2 flows, and robust session management patterns.

Python Code Review & Linting

Automates Python code analysis to enforce security standards, fix anti-patterns, and maintain strict linting using Ruff and Mypy.

Access Control Patterns

Implements secure authorization logic by auditing and applying RBAC, ABAC, and IDOR prevention patterns.

MCP Protocol Compliance Testing

Validates Model Context Protocol (MCP) implementations for JSON-RPC 2.0 compliance, schema integrity, and async execution reliability.

TypeScript Component Testing

Implements industry-standard Jest, Vitest, and React Testing Library patterns to ensure robust, accessible frontend components.

Firebase Authentication Patterns

Implements secure Firebase Authentication flows including OAuth, session management, and server-side protected routes.

Red/Blue Team Validator

Stress-tests decisions, strategies, and architectures through iterative adversarial Red/Blue team simulations to uncover and mitigate vulnerabilities.

TypeScript Component Testing

Implements robust, accessible UI component tests using React Testing Library and modern TypeScript patterns.

QA Strategy & Quality Metrics

Guides the implementation of robust testing pyramids and software maintainability metrics to reduce technical debt and improve code health.

Privacy & Consent Compliance

Implements privacy-first development patterns to ensure GDPR and CCPA compliance through automated consent management and data minimization.

Pytest Modern Test Patterns

Implements standardized pytest structures including fixtures, parametrization, and the AAA pattern to build robust Python test suites.

Python Code Review & Linting

Enhances Python code quality through automated Ruff linting, security vulnerability detection, and robust mypy type checking.

Firestore Security Rules Generator

Generates robust, production-ready Firestore security rules with patterns for RBAC, multi-tenancy, and schema validation.

Firebase Authentication Patterns

Implements secure Firebase Authentication flows including OAuth, session management, and protected routes for web applications.

Advanced JS Mocking Patterns

Implements sophisticated JavaScript testing strategies for module isolation, timer manipulation, and mock lifecycle management.