Security & Testing Claudeスキル

Java Testing Patterns

Implements standardized Java testing best practices using JUnit 5, Mockito, and AssertJ to ensure robust code coverage.

Rust Testing Patterns

Implements standardized Rust testing practices including unit, integration, property-based, and asynchronous tests to ensure code reliability.

Git Hook Manager

Configures and troubleshoots git hooks using Husky, Lefthook, and other industry-standard frameworks to automate code quality checks.

Gemini Large Context Review

Leverages Gemini's 2M token context window to perform deep, advisory-only reviews of large codebases, logs, and documentation within Claude Code.

Skill Auditor & Reviewer

Audits and validates Claude Code skills using a multi-agent parallel review process to ensure structural integrity and content quality.

Security Expert

Secures APIs and applications by implementing robust authentication, authorization, and vulnerability mitigation strategies.

AI Code Review & Security Auditor

Analyzes and audits uncommitted changes from AI editors through logic verification, security scans, and automated testing suites.

PII Redaction Enforcer

Automatically redacts sensitive personal data from logs and outputs to ensure regulatory compliance and data privacy.

Test-Driven Development (TDD)

Enforces strict Red-Green-Refactor cycles to ensure every line of production code is verified by a failing test first.

ArchFlow Automated Test Manager

Generates and executes scoped backend and frontend tests based on code changes and architectural requirements.

TypeScript Test Engineer

Provides expert guidance for writing, debugging, and optimizing TypeScript and Next.js test suites using Vitest, Playwright, and property-based testing.

Vast.ai Enterprise RBAC & SSO

Configures enterprise-grade security for Vast.ai, including SAML/OIDC single sign-on and role-based access control.

CSRF Protection Validator

Validates web application CSRF protection implementations to identify security gaps and ensure robust state-changing operation security.

PatriotForge TDD Patterns

Implements rigorous test-driven development workflows using pytest-asyncio, fakeredis, and automated fixture management.

Secrets Scanner & Remediation

Scans codebases and Git history for exposed credentials, API keys, and sensitive tokens with automated remediation guidance.

Next.js Supabase Auth

Integrates Supabase Authentication with Next.js App Router using best practices for server-side rendering and secure session management.

PatriotForge Security Operations

Enforces rigorous security standards and full-stack protection protocols across the PatriotForge ERP ecosystem.

Security Scanner

Performs comprehensive security audits and vulnerability scans across multiple programming languages and frameworks.

Performance Test Suite

Executes comprehensive load, stress, and performance benchmarking tests to ensure system stability and scalability.

LangChain Local Development Loop

Streamlines LangChain application development with optimized project structures, automated testing, and LLM mocking.

Surgical Bugfix

Resolves software defects using a minimalist, reductive approach that prioritizes code deletion and surgical precision.

Plan Validation & Scoring

Validates AI-generated development plans through adversarial challenges and quantitative confidence scoring to ensure production readiness.

Kosmos E2E Testing Suite

Automates comprehensive end-to-end testing for the Kosmos autonomous AI scientist project across local and cloud LLM providers.

Test Design Patterns

Implements industry-standard testing strategies and patterns to improve code quality and test suite reliability.

TDD Red-Green-Refactor Workflow

Guides the implementation of Test-Driven Development using the Red-Green-Refactor cycle and industry-standard testing patterns.

Secure Coding Practices

Implements robust security patterns including input validation, secrets management, and secure authentication to protect applications from common vulnerabilities.

OWASP Top 10 Security Audit

Audits source code for the most critical web application security risks with actionable remediation patterns and checklists.

Agent Performance Evaluation

Implements robust evaluation frameworks and multi-dimensional rubrics to measure the quality, accuracy, and efficiency of AI agent systems.

Rails Architect & Code Auditor

Performs systematic Rails code reviews and audits across architecture, performance, security, and testing dimensions while enforcing idiomatic patterns.

Production Code Auditor

Autonomously scans and transforms codebases into enterprise-grade, production-ready software with automated security and performance fixes.