Security & Testing Claudeスキル

TanStack Client Authentication

Implements secure token-based authentication and route guards for TanStack Router and TanStack Start client-side applications.

Playwright E2E Testing

Automates the planning and implementation of comprehensive end-to-end browser tests using Playwright and MCP-driven automation.

Hookify Rule Architect

Standardizes and enforces coding practices by creating custom Hookify rules for Claude's development environment.

Compliance Manager Guardian

Enforces strict regulatory guardrails for PCI, GDPR, PSD2, and HIPAA compliance during core security file modifications.

Network Lab Architect

Deploys and configures common network services for penetration testing labs and security research environments.

Secure PR Workflow

Automates the end-to-end process of security auditing, pull request creation, and CI/CD monitoring using Claude Code.

Pentest Commands Reference

Provides a comprehensive reference of essential commands and workflows for professional penetration testing and security audits.

TDD Red Phase Test Generator

Generates comprehensive failing tests to define expected software behavior and edge cases during the initial TDD phase.

Pentest Commands Reference

Provides a comprehensive library of penetration testing commands for network scanning, exploitation, and vulnerability assessment.

TDD Red Phase Test Generator

Generates comprehensive failing tests to define behavior and edge cases during the initial Red phase of Test-Driven Development.

WCAG Accessibility Audit Patterns

Conducts comprehensive WCAG 2.2 accessibility audits with automated testing, manual verification, and actionable remediation strategies.

WCAG Accessibility Audit Patterns

Conducts comprehensive WCAG 2.2 accessibility audits using automated scans, manual verification protocols, and detailed remediation strategies.

Pentest Checklist

Provides a structured methodology and comprehensive checklist for planning, executing, and managing professional penetration testing engagements.

Refactor Verification

Verifies code refactors deterministically using AST-based comparison to ensure structural changes don't introduce unintended logic modifications.

Security Engineering

Applies adversarial thinking and robust security patterns to design, review, and harden software systems against vulnerabilities.

HTML Injection Security Testing

Identifies and tests for HTML injection vulnerabilities to secure web applications against content manipulation and phishing attacks.

HTML Injection Testing

Identifies and validates HTML injection vulnerabilities to secure web applications against content manipulation and phishing attacks.

Quolar Setup Wizard

Streamlines the configuration and deployment of the Quolar AI-powered test automation engine within your development environment.

Linear to Playwright Test Automator

Transforms Linear tickets into self-healing Playwright E2E tests with automated CI integration and PR creation.

Rigorous Work Verification

Enforces evidence-based task completion by requiring fresh command output before making any success claims.

File Path Traversal Security Testing

Provides a comprehensive framework for identifying, testing, and remediating directory traversal and Local File Inclusion (LFI) vulnerabilities in web applications.

Systematic Debugging

Implements a rigorous four-phase framework to identify root causes and eliminate trial-and-error debugging thrashing.

Test-Driven Development (TDD)

Enforces a strict Red-Green-Refactor workflow to ensure high-quality, verified production code through failing tests.

Tech Debt Scanner

Audits project health by identifying technical debt, duplicate code, security vulnerabilities, and code quality bottlenecks.

Security Scanner

Scans code for critical security vulnerabilities and generates structured remediation reports with actionable fixes.

Tech Debt Scanner

Audits project health by identifying technical debt, code duplication, and architectural bottlenecks to improve long-term maintainability.

Vitest Safety Guard

Ensures Vitest test suites run reliably by preventing hung processes, enforcing timeouts, and managing system resources.

MoonBit PBT Workflow Guide

Automates the implementation and optimization of Property-Based Testing in MoonBit projects using the QuickCheck framework.

API Security Fuzzing & Bug Bounty

Guides comprehensive security testing for REST, SOAP, and GraphQL APIs to identify vulnerabilities like IDOR and injection.

API Security & Fuzzing Specialist

Provides expert guidance and automated workflows for security auditing, fuzzing, and vulnerability discovery across REST, SOAP, and GraphQL APIs.