Security & Testing Claude 스킬

Governance RoC Compliance Checker

Evaluates session activity against Rule of Constraints (RoC) policies to ensure regulatory and organizational compliance.

CPython Regression Test Runner

Executes and analyzes the CPython regression test suite with parallel processing and automated failure summarization.

Horizon Lab Auditor

Audits code changes for architectural compliance, security risks, and robustness against defined repository baselines.

Writing Good Tests

Implements high-quality testing patterns including table-driven tests, condition-based waiting, and strategic mocking strategies.

Defense-in-Depth Validation

Implements multi-layered data validation patterns to catch invalid data at every architectural boundary and prevent deep-stack failures.

Effective Coding Standards

Applies robust engineering principles, property-driven design, and cross-platform native patterns to ensure high-quality, maintainable software.

Property-Based Testing

Enhances software reliability by generating random inputs to verify invariants and edge cases across multiple programming languages.

Rust Unsafe Code Checker

Audits Rust code for memory safety violations, sound FFI implementations, and missing safety documentation.

Test-Driven Development (TDD)

Enforces the Red-Green-Refactor cycle to ensure code reliability and high-quality software architecture.

Reality Verification

Automates issue reproduction and fix validation to ensure code changes actually resolve targeted bugs and regressions.

Systematic Debugging Orchestrator

Enforces a structured root-cause investigation workflow to resolve complex software failures and prevent repetitive fix attempts.

Verification Protocol

Enforces a rigorous 5-step evidence-based validation process before any task is marked as complete or successful.

Symfony Security Zone Manager

Automates the creation of security zones, controller registration, and profile-based access rights for Symfony StarterKit projects.

Overthink Runtime Verification

Validates Overthink OS installations by testing GPU access, service health, and container lifecycles.

Overthink Runtime Verification

Verifies Overthink OS installations by testing GPU detection, service health, and container lifecycles.

Temporal Python Testing

Automates the creation and debugging of Temporal workflow tests using pytest, time-skipping, and determinism validation.

OWASP Top 10 Security Checklist

Audits and secures applications by applying the industry-standard OWASP Top 10 security framework directly within the development workflow.

Accessibility Testing with axe-core

Automates accessibility audits and WCAG compliance checks using axe-core and Playwright.

Accessibility Testing & WCAG Compliance

Automates web accessibility audits and WCAG 2.1 compliance testing using axe-core and Playwright.

Auth0 Security Specialist

Hardens Auth0 implementations by configuring advanced attack protection, multi-factor authentication, and secure token practices.

OWASP Top 10 Security Checklist

Audits and secures applications by applying the industry-standard OWASP Top 10 vulnerability checklist to identify potential security risks.

STRIDE Threat Analysis Patterns

Conducts systematic threat modeling and security analysis using the industry-standard STRIDE methodology.

Python Anti-Patterns Checklist

Identifies and corrects common Python coding mistakes, architectural flaws, and performance bottlenecks using a comprehensive best-practices checklist.

Auth Implementation Patterns

Implements secure, scalable authentication and authorization systems using modern patterns like JWT, OAuth2, and Role-Based Access Control (RBAC).

Audit Methodology

Conducts comprehensive multi-domain web audits covering accessibility, security, performance, and digital sustainability.

mTLS Infrastructure Configuration

Configures mutual TLS (mTLS) for zero-trust service-to-service communication across cloud-native environments.

Debugging Strategies

Master systematic debugging techniques and root cause analysis to efficiently track down bugs across any technology stack.

Evaluation Rubric Designer

Designs clear, measurable, and actionable evaluation rubrics for code quality, content standards, and performance assessment.

AI Quality Evaluation Patterns

Automates quality assurance by providing standardized evaluation patterns and rubrics for code, content, and system behavior.

Strict TDD Workflow State Machine

Enforces a disciplined 7-state Test-Driven Development workflow using Result types and dependency injection.