Security & Testing Claudeスキル

CI/CD Secrets Management

Implements secure handling, storage, and rotation of sensitive credentials across major CI/CD platforms and cloud providers.

Solidity Security & Audit

Implements industry-standard security patterns and audits smart contracts to prevent critical vulnerabilities in Ethereum-based applications.

SAST Configuration & Security Scanning

Automates the setup and configuration of Static Application Security Testing (SAST) tools to detect vulnerabilities in source code across multiple languages.

Debugging Strategies

Provides systematic techniques and diagnostic tools to identify, isolate, and resolve complex software bugs across various technology stacks.

Web3 Smart Contract Testing

Standardizes the creation and execution of comprehensive test suites for Solidity smart contracts using Hardhat and Foundry.

1Password + direnv Secrets Management

Optimizes secret loading by integrating the 1Password CLI with direnv using high-performance patterns.

Procedure Checker

Validates experimental lab procedures against LA-Bench standards using automated scripts and semantic subagent analysis to ensure technical accuracy and format compliance.

Expert Debugger & Lint Fixer

Executes a systematic, hypothesis-driven workflow to reproduce, isolate, and fix complex software bugs while ensuring code remains lint-clean and regression-free.

Code Review Checklist

Standardizes the code review process through a multi-dimensional quality assessment covering security, performance, and maintainability.

Acceptance Test Writing

Generates high-quality acceptance criteria and test specifications using industry-standard Behavior-Driven Development (BDD) and Gherkin syntax.

Advanced Debugging

Streamlines troubleshooting across Next.js, Supabase, and React Query stacks with specialized workflows and automated diagnostic tools.

Code Reviewer

Performs automated code reviews with security scanning, quality metrics, and performance analysis to ensure production-grade code.

OSS Solution Implementation

Implements high-quality code and comprehensive tests for open-source contributions while strictly following project standards.

Web App Testing with Playwright

Automates and tests local web applications using native Playwright scripts and managed server lifecycles.

.NET Code Security & Quality Analyzer

Performs automated static analysis, security audits, and dependency vulnerability scans for .NET projects.

Pipeline Data Validator

Ensures data integrity across the development lifecycle by validating JSON artifacts against strict Pydantic schemas.

Philsquare Laravel Permissions

Streamlines role-based access control in Laravel by managing permissions directly within policy classes.

Unit Test Generation Agent

Generates comprehensive, high-coverage unit tests for functions, React components, and hooks across multiple testing frameworks.

Root Cause Tracing

Systematically traces bugs backward through the execution chain to identify and resolve original triggers rather than treating immediate symptoms.

LimaCharlie Reporting

Generates and serves interactive HTML reports, dashboards, and data visualizations for LimaCharlie security operations data via a local web server.

Security Best Practices

Implements core security principles and defensive programming patterns to safeguard applications against common vulnerabilities.

LimaCharlie YARA Manager

Simplifies the creation, testing, and deployment of YARA rules for automated malware detection and memory scanning within the LimaCharlie SecOps platform.

Safety Memory

Implements specific coding standards and protocols for managing safety memory within agentic environments.

Output Configurator

Guides users through the step-by-step configuration of LimaCharlie telemetry outputs to SIEMs, data lakes, and storage destinations.

LimaCharlie Playbook Automator

Designs and implements Python-based automated response workflows and security orchestration scripts within the LimaCharlie platform.

Testing Best Practices

Implements standardized testing patterns, architectural pyramids, and TDD best practices for robust software development.

Forensic Analyst

Conducts comprehensive digital forensics investigations, reconstructs attack timelines, and analyzes system artifacts using LimaCharlie's security operations capabilities.

Perl Zero-Cost Assertions

Implements zero-cost runtime assertions for Perl applications using Syntax::Keyword::Assert for high-performance debugging.

CA Django Linters

Automates Python code formatting and linting for Django projects using Ruff to ensure consistent code quality and style compliance.

Defense-in-Depth Validation

Implements multi-layered data validation across system boundaries to make bugs structurally impossible and ensure data integrity.