Security & Testing Agent Skills

SAST Security Configuration

Configures and optimizes Static Application Security Testing (SAST) tools to automate vulnerability detection in application code.

Authentication Implementation Patterns

Implements secure, industry-standard authentication and authorization patterns including JWT, OAuth2, and RBAC.

Advanced Debugging Strategies

Master systematic debugging techniques and root cause analysis to efficiently identify and resolve complex software bugs across any stack.

Dependency Upgrade Manager

Streamlines major software dependency migrations through compatibility analysis, staged rollout strategies, and automated testing verification.

Container Security Scanner

Scans container images and running environments for vulnerabilities using industry-standard security tools like Trivy and Snyk.

XSS Vulnerability Scanner

Automates the identification of cross-site scripting (XSS) vulnerabilities across HTML, JavaScript, and CSS contexts to enhance web application security.

Temporal Python Testing

Simplifies testing Temporal workflows using pytest with time-skipping and advanced mocking strategies.

PCI DSS Compliance Validator

Automates PCI DSS compliance audits by scanning codebases and infrastructure configurations for security vulnerabilities and standard deviations.

Integration Test Runner

Automates the orchestration, execution, and cleanup of complex integration test suites directly within Claude.

XSS Vulnerability Scanner

Scans web application codebases to identify and remediate Reflected, Stored, and DOM-based XSS vulnerabilities.

PCI DSS Validator

Analyzes codebases and infrastructure configurations to ensure compliance with Payment Card Industry Data Security Standard (PCI DSS) requirements.

Container Security Scanner

Scans Docker images and running containers for vulnerabilities using industry-standard tools like Trivy and Snyk.

Security Misconfiguration Finder

Audits configuration files and system settings to proactively identify and remediate security vulnerabilities and compliance issues.

Secret Scanner

Identifies and remediates exposed API keys, passwords, and sensitive credentials within your codebase using pattern matching and entropy analysis.

Input Validation Scanner

Scans source code to detect and mitigate input validation vulnerabilities like SQL injection and cross-site scripting (XSS).

Infrastructure Compliance Checker

Automates infrastructure audits against industry standards like SOC2, HIPAA, and PCI-DSS to identify security gaps and compliance risks.

Security Audit Reporter

Generates comprehensive security audit reports and compliance assessments for applications and systems.

Security Misconfiguration Finder

Identifies and remediates security vulnerabilities in infrastructure-as-code, application configurations, and system settings.

Snapshot Test Manager

Manages and updates snapshot tests across JavaScript frameworks through intelligent diff analysis and selective updates.

PCI DSS Compliance Validator

Automates PCI DSS compliance audits by scanning codebases and infrastructure configurations for security vulnerabilities and regulatory deviations.

Snapshot Test Manager

Manages and updates snapshot tests by analyzing diffs and distinguishing intentional UI changes from regressions.

Production Readiness Specialist

Systematically audits, tests, and prepares applications for production deployment using comprehensive automated testing and analysis.

FDA Regulatory Consultant Specialist

Navigates FDA regulatory pathways and ensures QSR and HIPAA compliance for medical device development.

Security Agent

Conducts automated security audits to identify vulnerabilities like SQL injection, XSS, and insecure dependencies.

HIPAA Compliance Checker

Audits software projects and infrastructure configurations to identify potential HIPAA compliance vulnerabilities and healthcare data security gaps.

CORS Policy Validator

Audits and validates Cross-Origin Resource Sharing (CORS) configurations to identify security vulnerabilities and misconfigurations.

Run the Tests

Automates test execution, failure diagnosis, and infrastructure setup to ensure 100% test pass rates across multiple languages and frameworks.

Frontend E2E User Journeys

Automates critical frontend user workflows using resilient end-to-end testing patterns and the Page Object Model.

Test-Driven Development (TDD)

Enforces a rigorous Red-Green-Refactor workflow by requiring mandatory failing tests and execution evidence before any production code is written.

API Contract Validator

Validates API integrity and consumer compatibility using Pact and OpenAPI specifications to prevent breaking changes.