Security & Testing Claude 스킬

Scope-Focused PR Review

Conducts disciplined pull request reviews by validating code against original requirements and automatically routing out-of-scope improvements to GitHub issues.

Phishing Simulation & Security Awareness

Guides security professionals through authorized phishing simulations and social engineering tests using tools like Shellphish and Wifiphisher.

Error Handling Patterns

Standardizes error management and security logging across autonomous development systems to ensure resilient and auditable code.

Testing Guide

Implements a comprehensive test-driven development (TDD) framework and multi-layered validation strategy for autonomous coding.

RubyCritic Code Quality Analysis

Analyzes Ruby and Rails code quality to identify code smells, complexity issues, and refactoring opportunities using RubyCritic.

Security Design Patterns

Implements production-grade security best practices, secret management protocols, and input validation patterns to harden your codebase.

QA Expert Agent

Architects comprehensive quality assurance strategies and automated testing frameworks to ensure high-performance, defect-free software delivery.

Network Ports Reference

Provides instant access to comprehensive network port mappings and security enumeration commands for penetration testing and system administration.

Networking Infrastructure Essentials

Master foundational networking concepts and Cisco device configurations to support secure infrastructure management and penetration testing.

Testing Coverage

Ensures code changes maintain or improve testing coverage by adhering to specific project standards and best practices.

Agent Incident Responder

Manages security breaches and operational incidents through rapid evidence collection, forensic analysis, and coordinated recovery.

Research Ethics Review

Evaluates research protocols for ethical compliance, participant privacy, and IRB readiness using international standards.

Weasel Solidity Explainer

Explains Solidity smart contract logic, design patterns, and potential risks through detailed architectural walkthroughs.

Weasel Smart Contract Attack Validator

Validates user-proposed security vulnerabilities and attack vectors in Solidity smart contracts through rigorous trace analysis.

Weasel Overview

Streamlines smart contract security audits by providing comprehensive project scoping and architectural analysis.

Weasel Filter

Filters and triages false positives from Weasel Solidity static analysis reports to ensure high-quality security findings.

Quality Assurance & SDLC Engineering

Implements rigorous Verification and Validation processes based on CMMI standards to ensure products are built correctly and solve the right user needs.

Holistic Linting

Enforces code quality through automated multi-linter workflows and systematic root-cause resolution to ensure code is truly production-ready.

Verification Gate

Enforces mandatory pre-action verification checkpoints to ensure implementation actions align with explicitly verified reasoning and project reality.

Frontend Production Quality

Enforces rigorous accessibility standards, performance benchmarks, and comprehensive verification protocols for production-ready user interfaces.

Review Core Framework

Establishes a standardized, evidence-based foundation for conducting technical reviews, audits, and architectural assessments.

Diff Analysis & Risk Assessment

Analyzes code changesets to categorize semantic impact, assess deployment risks, and generate structured release summaries.

Bug Review Workflow

Systematically identifies, documents, and fixes software defects using language-specific expertise and evidence-based verification.

Claude Hook Evaluator

Evaluates and audits Claude Code hooks for security vulnerabilities, performance bottlenecks, and SDK compliance.

Structured Review Output

Standardizes technical review deliverables to ensure consistent, actionable findings across various analysis types.

Authentication Patterns

Implements standardized authentication flows and credential verification strategies for integrating external services securely.

Leyline Error Patterns

Implements standardized error handling and recovery strategies to build resilient Claude Code plugins and integrations.

Evidence Logging

Generates verifiable audit trails and reproducible analysis logs by capturing commands, citations, and artifacts during development workflows.

Pensive Shared Review Infrastructure

Standardizes code review workflows and output formats across the Pensive suite of specialized review skills.

Rust Code Review & Safety Audit

Conducts expert-level Rust code audits focusing on memory safety, concurrency patterns, and idiomatic practices.