Security & Testing Claudeスキル

Systematic Debugging Workflow

Implements a rigorous four-phase framework to identify root causes and eliminate bugs through evidence-based analysis rather than guesswork.

Project Context Security Detector

Identifies a project's technology stack, architecture, and security-sensitive features to streamline audits and analysis.

Systematic Debugging

Implements a rigorous four-phase framework to identify root causes and apply permanent fixes for technical bugs and system failures.

Security Validation Scanner

Automates pre-merge security scans to detect hardcoded secrets, insecure SSH configurations, and non-portable paths.

Eval Framework

Standardizes and compares AI-generated evaluations to ensure consistency, accuracy, and reproducibility across multiple runs.

Verified Completion Gate

Enforces rigorous verification protocols by requiring fresh command evidence before any task is marked as complete or fixed.

Remediation: Injection Vulnerabilities

Provides actionable code patterns and best practices to fix SQL injection, command injection, and cross-site scripting (XSS) across multiple programming languages.

Condition-Based Waiting

Eliminates flaky tests by replacing arbitrary timeouts with condition polling to wait for actual state changes.

Testing Strategies

Design and implement comprehensive test suites including unit, integration, and E2E tests across multiple programming languages.

Security & Compliance Checklist

Applies comprehensive security audits and OWASP-aligned checks to identify vulnerabilities in application code and architecture.

Backend Enum Use

Implements type-safe, feature-rich PHP enums following Laravel conventions to eliminate magic strings and improve code quality.

Global Error Handling

Implements robust error management strategies including centralized handling, graceful degradation, and user-friendly messaging to ensure application stability and security.

Testing Test Writing

Guides the strategic creation of tests by focusing on core user flows and behavioral outcomes while maintaining development velocity.

Security Remediation Library

Provides a centralized index of security remediation guides to help developers fix injection, cryptography, authentication, and configuration vulnerabilities.

Vulnerability Patterns Index

Provides a centralized index for routing Claude to universal and language-specific security vulnerability detection patterns.

Baselayer Analysis & Investigation

Employs an evidence-based methodology to investigate codebases, diagnose root causes, and map system architectures with calibrated confidence levels.

Automated Testing & QA

Generates and runs comprehensive test suites with automated coverage reporting and documentation-backed best practices.

Security Compliance & Vulnerability Scanner

Automates security validation, vulnerability scanning, and compliance auditing to ensure secure software development cycles.

Testing Pest

Generates comprehensive Pest test suites for Laravel projects, ensuring high coverage across controllers, services, and Livewire components with standardized organizational patterns.

Refactoring Analysis

Analyzes codebases to identify technical debt, architectural complexity, and refactoring opportunities across multiple programming languages.

TDD Wada Style

Implements high-quality software using the Red-Green-Refactor cycle and behavior-driven test patterns inspired by Takuto Wada's philosophy.

Code Testing & TDD Suite

Generate and run unit and integration tests using pytest and Jest with support for mocks, fixtures, and coverage reporting.

TDD Workflow Guide

Guides developers through the test-driven development cycle to ensure robust code through red-green-refactor iterations.

Scale Game Problem Solver

Identifies architectural bottlenecks and hidden edge cases by stress-testing software logic at extreme scales.

Security & Compliance Validator

Protects applications by automating security audits, vulnerability scanning, and environment compliance checks.

Code Review Gate

Enforces human-in-the-loop validation for security-sensitive paths and high-complexity code changes within the Claude Code environment.

Security & Compliance Validation

Hardens software projects through automated security scanning, vulnerability detection, and comprehensive compliance auditing.

TDD Workflow Pro

Enforces the Red-Green-Refactor cycle to ensure test-first development and high code quality.

Security Compliance & Scanning

Automates security audits, vulnerability scanning, and compliance validation for software development workflows.

Security Scanner

Scans source code for security vulnerabilities and provides actionable remediation patterns based on industry standards.