Security & Testing Claude 技能

Security & Privacy Engineering

Manages security policies, privacy compliance, and risk assessments to ensure organizational data integrity and regulatory adherence.

Command Executor

Executes and validates terminal commands safely while capturing real output and monitoring for performance regressions.

Lint and Validate

Ensures code quality and project standards by performing automatic linting, type-checking, and static analysis after every modification.

Smart Test Fixing

Systematically identifies, groups, and resolves failing test suites using an optimized infrastructure-first debugging strategy.

Systematic Testing & Debugging

Guides test-driven development and systematic debugging through structured frameworks and comprehensive test suite generation.

Red Team Tools & Methodology

Automates reconnaissance and security vulnerability discovery using proven red team methodologies and industry-standard toolsets.

Violet Plugin Tester

Validates, tests, and ensures the quality of Violet AI plugins before deployment to maintain structural consistency and reliability.

Code Quality Evaluation (The Crucible)

Orchestrates eight specialized AI agents to perform deep code reviews across naming, security, complexity, and testing dimensions.

Test Coverage Architect

Builds comprehensive, executable test coverage for mission-critical paths while eliminating empty stubs and vanity metrics.

Engineering Testing Anti-Patterns

Enforces high-quality testing standards by preventing mock-related errors and production code pollution during the development process.

Verification Before Completion

Enforces rigorous build and test verification protocols before allowing AI agents to claim task completion or success.

Rigorous Engineering Validation

Enforces reproducible testing and evidence-driven verification to ensure every code change is proven reliable before merging.

Engineering Security & Safety

Implements proactive threat modeling and security-first development practices to minimize attack surfaces and ensure data safety.

Command Safety & Categorization Specialist

Manages and optimizes command safety classification rules to ensure secure execution and accurate documentation verification.

Spec-Driven Implementation

Implements features using a rigorous TDD workflow with automated task tracking and requirement traceability.

Engineering Verification

Enforces an evidence-based gate function that requires fresh command output and validation before any task is marked as complete.

ERC-4337 Privacy Wallet Dev

Develops privacy-preserving Account Abstraction wallets for vehicle identity and sensitive data management using ERC-4337 standards.

TDD Engineering Excellence

Enforces a disciplined Red-Green-Refactor cycle to ensure every line of production code is validated by a failing test.

Metasploit Framework Expert

Guides professional penetration testing workflows, vulnerability exploitation, and payload generation using the Metasploit Framework.

Security Auditor

Reviews source code for vulnerabilities and provides actionable remediation steps to harden applications against cyber threats.

Automated Test Repair

Systematically identifies, groups, and resolves failing test suites using a prioritized multi-stage debugging strategy.

WordPress Penetration Testing

Conducts comprehensive security audits and vulnerability assessments on WordPress installations using industry-standard tools and methodologies.

Systematic Debugging Framework

Enforces a disciplined, four-phase debugging process to identify root causes and implement stable fixes.

Root Cause Debugging Playbook

Systematic debugging playbook for tracing failures backward through the call chain to identify and fix bugs at their origin.

Playwright Test Maintainer

Refactors and optimizes existing Playwright E2E test suites to improve stability, maintainability, and code quality.

CodeRabbit AI Reviews

Performs automated, deep AI code reviews locally to identify security risks, concurrency issues, and complex logic flaws.

WordPress Penetration Testing

Conducts deep security audits and vulnerability assessments of WordPress installations using professional penetration testing methodologies.

Global Input Validation

Implements robust, full-stack input validation and data sanitization to ensure application security and data integrity.

AI Review Council

Orchestrates multiple external AI models and specialized subagents to provide consensus-driven code reviews and architectural guidance.

Browser Testing Patterns

Automates comprehensive web application testing including functional validation, WCAG accessibility compliance, and Core Web Vitals performance analysis.