Security & Testing Claude 技能
发现security & testing类别的 Claude 技能。浏览 105 个技能，找到适合您 AI 工作流程的完美功能。
Dify Frontend Testing
Generates high-quality Vitest and React Testing Library tests for Dify's frontend components, hooks, and utilities.
CI Test Triager
Systematically reproduces and debugs flaky CI test failures in Next.js and Playwright environments.
Verification Loop
Standardizes code quality checks through a multi-phase verification process for builds, types, tests, and security.
Eval Harness
Implements Eval-Driven Development (EDD) to quantify AI performance and prevent regressions during coding sessions.
Security Review & Audit
Performs comprehensive security audits and implements robust defensive patterns to protect applications from common vulnerabilities and data leaks.
TDD Workflow & Test Automation
Enforces test-driven development principles to ensure 80%+ code coverage through unit, integration, and E2E testing cycles.
Python Anti-Pattern Review
Identifies and resolves common Python coding mistakes, architectural flaws, and performance bottlenecks using a comprehensive best-practices checklist.
Conductor Workflow Patterns
Implements a rigorous Test-Driven Development (TDD) workflow and phase-based verification protocol for systematic software development.
Protocol Reverse Engineering
Analyzes and documents network protocols through traffic capture, packet dissection, and binary structure identification.
Anti-Reversing Techniques
Analyzes and bypasses software protection mechanisms, including anti-debugging, obfuscation, and VM detection.
Memory Forensics Mastery
Master memory forensics techniques including memory acquisition, process analysis, and artifact extraction using Volatility 3 and advanced detection patterns.
Binary Analysis & Reverse Engineering
Analyzes compiled binaries and assembly code to reconstruct program logic and identify implementation patterns.
Web Application Testing
Automates local web application testing and browser interaction using Playwright scripts and server lifecycle management.
Kubernetes Security Policies
Implements production-grade Kubernetes security through NetworkPolicies, Pod Security Standards, and robust RBAC configurations.
Secrets Management for CI/CD
Implements secure storage, rotation, and management of sensitive credentials across various CI/CD platforms and cloud providers.
Solidity Smart Contract Security
Secures Ethereum smart contracts by implementing industry-standard protection patterns and identifying common vulnerabilities during the development process.
Memory Safety Patterns
Implements robust memory-safe programming patterns and resource management across Rust, C++, and C.
Python Testing Patterns
Implements comprehensive Python testing strategies using pytest, fixtures, and advanced mocking techniques.
JavaScript Testing Patterns
Implements comprehensive testing strategies for JavaScript and TypeScript applications using modern frameworks like Jest and Vitest.
WCAG Accessibility Audit & Compliance
Conducts comprehensive WCAG 2.2 accessibility audits and provides actionable remediation strategies for web content.
SAST Security Configuration
Configures and automates Static Application Security Testing (SAST) tools to detect and remediate vulnerabilities in application code.
Systematic Debugging Strategies
Applies systematic debugging techniques, profiling tools, and root cause analysis to resolve complex software issues across any technology stack.
mTLS Configuration & Management
Configures and manages mutual TLS (mTLS) for zero-trust service-to-service communication across cloud-native environments.
Screen Reader Testing
Validates web application accessibility by providing specialized guidance and command references for major screen readers like VoiceOver, NVDA, and JAWS.
STRIDE Threat Modeling Patterns
Implements the STRIDE methodology to systematically identify, categorize, and mitigate security threats in system architectures.
Threat Mitigation Mapping
Maps identified security threats to specific technical controls and mitigations to automate risk treatment and defense-in-depth planning.
Attack Tree Construction
Visualizes and analyzes potential security threat paths through systematic attack tree modeling and risk assessment.
GDPR Compliance & Data Handling
Implements GDPR-compliant data processing, granular consent management systems, and automated privacy controls within your applications.
Authentication Implementation Patterns
Implements secure authentication and authorization systems using JWT, OAuth2, session management, and role-based access control.
Web3 Smart Contract Testing
Tests smart contracts comprehensively using Hardhat and Foundry frameworks to ensure security, gas efficiency, and protocol reliability.
Scroll for more results...