Security & Testing Claude 스킬

Instantly Security Basics

Implements enterprise-grade security protocols, secret management, and access controls for Instantly API integrations.

Retell AI Security Basics

Implements security best practices for Retell AI integrations, including secret management, access control, and audit logging.

API Contract Validator

Automates the validation of API contracts using consumer-driven testing frameworks like Pact and Spring Cloud Contract.

Supabase Policy Guardrails

Enforces security best practices and code quality rules for Supabase integrations through automated linting and CI/CD guardrails.

Data Privacy Scanner

Scans codebases for sensitive information leaks and data privacy vulnerabilities to ensure compliance with global protection standards.

Clerk Authentication Hello World

Verifies Clerk authentication integrations by implementing initial protected routes and authenticated API calls.

Windsurf Pitfalls & Best Practices

Identifies and fixes common integration anti-patterns, security vulnerabilities, and performance bottlenecks in Windsurf-based applications.

Test Data Generator

Generates realistic, schema-aligned test data for software applications, including user profiles, e-commerce transactions, and custom datasets.

Access Control Auditor

Audits access control implementations to identify security vulnerabilities, overly permissive roles, and authorization misconfigurations.

TDD Implementer

Automates the test-driven development cycle through isolated Git worktrees and strict code coverage enforcement.

API Load & Stress Tester

Executes automated load and stress testing to validate API performance, scalability, and system stability.

Security Incident Responder

Guides the investigation, documentation, and remediation of security breaches using forensic analysis and structured playbooks.

Deep System Analysis

Conducts systematic investigations into codebases to identify root causes, architectural patterns, and performance bottlenecks.

Spec-Test-Driven Development

Enforces a rigorous specification-first workflow that ensures every feature is documented, tested, and verified before final implementation.

Instantly Data Privacy & Compliance

Implements PII handling, data retention policies, and GDPR/CCPA compliance patterns for Instantly integrations.

Perplexity Data Privacy & Compliance

Implements robust PII redaction, data retention policies, and GDPR/CCPA compliance patterns for Perplexity AI integrations.

Playwright Browser Automation

Automates end-to-end browser testing and web interactions using the modern Playwright framework for reliable web application validation.

Playwright Testing Framework

Automates end-to-end browser testing and web automation across Chromium, Firefox, and WebKit with native WSL2 support.

Authentication & Authorization Patterns

Implements secure access control systems using JWT, OAuth2, RBAC, and session management patterns.

Debugging Strategies

Master systematic debugging techniques and root cause analysis to efficiently track down bugs across any technology stack.

SSH Penetration Testing

Conducts comprehensive security audits and penetration tests on SSH services to identify and exploit vulnerabilities.

Self-Directed Debugging

Automates quality assurance by proactively identifying requirements, verifying implementations, and auto-fixing linter errors.

Debugging Strategies

Master systematic troubleshooting techniques and root cause analysis to efficiently resolve complex bugs and performance bottlenecks across any technology stack.

Global Error Handling

Implements comprehensive error management strategies including user-friendly messaging, custom exception types, and resilient recovery patterns.

Infrastructure Security Hardening

Hardens cloud infrastructure and Kubernetes environments using CIS benchmarks, secure configuration patterns, and automated vulnerability scanning.

Authentication & Authorization Patterns

Implements robust security systems using modern patterns like JWT, OAuth2, session management, and role-based access control.

Authentication & Authorization Patterns

Implements secure, industry-standard access control systems including JWT, OAuth2, and role-based permissions.

Secrets Guardian

Secures codebases by preventing accidental credential leaks through automated scanning and pre-commit hook integration.

Fix Hard: Zero-Tolerance Quality Enforcer

Enforces absolute code quality by automatically fixing all linting, typing, and security issues across your entire project.

Brutal Review: Zero-Tolerance Code Analysis

Performs ruthless, multi-agent code reviews with weighted scoring and an elite 95% passing threshold.