Security & Testing Claude 스킬

Global Input Validation

Implements robust, full-stack input validation and data sanitization to ensure application security and data integrity.

XSS & HTML Injection Security Testing

Performs comprehensive security audits to identify and demonstrate Cross-Site Scripting (XSS) and HTML injection vulnerabilities in web applications.

Security Documentation Analyst

Generates professional security policies, incident response plans, and compliance documentation to strengthen organizational security posture.

Pentest Command Master

Provides a comprehensive, ready-to-use reference of essential penetration testing commands for network scanning, exploitation, and vulnerability assessment.

Test-Driven Development (TDD)

Enforces a rigorous Red-Green-Refactor cycle to ensure all production code is preceded by a failing test.

Ruby RSpec Test Analyzer

Analyzes RSpec failures to provide immediate root-cause diagnosis and actionable debugging steps for Ruby applications.

Web Application Testing & Playwright Automation

Automates and validates local web applications using Playwright for comprehensive end-to-end testing and UI debugging.

Code Review

Automates comprehensive code quality analysis, security vulnerability scanning, and architectural compliance checks to ensure production-grade standards.

Oracle Reasoning Engine

Invokes high-reasoning models to perform deep analysis, complex debugging, and architectural reviews for your codebase.

Verification Guard

Enforces a mandatory verification protocol requiring empirical evidence before claiming any task completion or code success.

E2E Testing Adapter

Automates the creation of comprehensive end-to-end test scripts using industry-standard frameworks like Playwright, Cypress, and Selenium.

Test-Driven Development (TDD)

Enforces a strict Red-Green-Refactor cycle to ensure every line of production code is verified by a failing test first.

Scale Game Problem Solving

Identifies architectural weaknesses and hidden edge cases by simulating software systems at extreme operational scales.

Testing Anti-Pattern Guard

Prevents common software testing mistakes by enforcing strict principles against mock misuse and production code pollution.

Systematic Debugging

Enforces a rigorous four-phase framework to identify root causes and implement test-driven fixes for any software bug.

AI-Powered E2E Testing with Browser-Use

Generates and executes end-to-end browser tests using AI-driven automation for complex user journeys and authenticated flows.

Security Review Pro

Conducts comprehensive security audits and implements best practices for authentication, data handling, and infrastructure protection.

Aura Frog Test Writer

Automates the creation of comprehensive unit, integration, and E2E tests across multiple frameworks using a structured TDD workflow.

Claude Skill Reviewer

Validates and audits Claude Code skills and agents against architectural, implementation, and storage standards.

Active Directory Attack & Audit

Facilitates comprehensive security assessments and penetration testing of Microsoft Active Directory environments through guided reconnaissance and exploitation workflows.

Looper-Go Live Tester

Validates Looper-Go behavior by executing an automated smoke test in a isolated, temporary project environment.

Security Review & Audit

Performs comprehensive security audits and enforces best practices for authentication, input validation, and sensitive data handling.

QA Expert

Implements comprehensive testing strategies and quality assurance standards within the Claude Code development workflow.

Cloud Secrets Management

Implements secure handling of credentials and sensitive data within CI/CD pipelines and cloud environments.

Quick Bugfix (Aura Frog)

Accelerates the debugging process by applying a streamlined four-step Test-Driven Development (TDD) workflow to identify and resolve software errors.

Code Reviewer

Performs comprehensive automated code reviews to identify security vulnerabilities, performance bottlenecks, and style inconsistencies.

Rules Verification Test Engineer

Automates the design, execution, and analysis of comprehensive test suites for command verification systems and documentation validators.

Systematic Debugging Strategies

Implements methodical troubleshooting techniques and root cause analysis to efficiently resolve complex software bugs across multiple tech stacks.

API Mocking & MSW Integration

Simplifies end-to-end testing by simulating API responses, network delays, and error states using Playwright and MSW.

Advanced Debugging Strategies

Employs systematic troubleshooting techniques and profiling tools to identify and resolve complex software defects and performance bottlenecks.