Security & Testing Claude 技能

CarsXE Lien & Theft Check

Verifies a vehicle's legal status by identifying active liens and theft records using the CarsXE API.

Elegant Objects PHP Reviewer

Audits PHP code for compliance with Elegant Objects principles to ensure object-oriented purity and maintainability.

TDD Planning & Testing

Enforces a rigorous, phase-based Test-Driven Development workflow for bash script development using Vitest and automated logs.

Quality Gate Runner

Orchestrates comprehensive code quality checks including testing, linting, and type-checking with standardized reporting.

Systematic Debugging

Implements a rigorous, phase-based methodology to identify root causes and resolve technical issues without trial-and-error.

IoT UART Console (picocom)

Interacts with IoT device UART consoles for security auditing, hardware enumeration, and serial-based penetration testing.

Dependency Security Expert

Secures software supply chains by identifying vulnerabilities, implementing automated scanning, and enforcing dependency management best practices.

GitHub Security Fixer

Automates the identification, analysis, and remediation of GitHub CodeQL security alerts to maintain high code quality and security standards.

Team Authorization & RBAC

Manages team-based permissions and role-based access control to ensure consistent authorization across client-side actions and server-side functions.

TypeScript Any Eliminator

Refactors TypeScript codebases to replace 'any' types with robust, specific type definitions and strict interfaces.

Frontend Auth & JWT Patterns

Implements secure authentication flows using Better Auth and JWT token management for modern web applications.

RLS Audit & Multi-tenant Safety

Audits Row Level Security (RLS) configurations and ensures multi-tenant data isolation for secure server-side access.

Kubernetes Security Policies

Implements defense-in-depth Kubernetes security through network isolation, RBAC enforcement, and pod security standards.

Testing & TDD Quality Assurance

Implements high-quality testing strategies including TDD, the AAA pattern, and comprehensive test coverage targets for robust software development.

Perplexity Enterprise RBAC

Configures enterprise-grade single sign-on (SSO) and role-based access control for Perplexity integrations.

Systematic Debugging

Implements a rigorous, step-by-step methodology for isolating, fixing, and validating software bugs and test failures.

Web App Testing & Playwright Automation

Automates local web application testing and frontend verification using Playwright and managed server lifecycles.

QA Plan Generator

Transforms automated QA findings and screenshots into actionable developer tasks with clear acceptance criteria.

Web Application Testing

Automates end-to-end testing and UI debugging for local web applications using Playwright and server lifecycle management.

Code Quality Gate

Enforces Python code quality standards by automating linting, formatting, and static type checking before commits or pull requests.

Debugging Assistant

Diagnoses and resolves software bugs by analyzing stack traces, identifying root causes, and implementing production-ready fixes.

Enterprise Clerk Auth Platform

Implements enterprise-grade authentication and user management using Clerk, featuring AI-driven architecture and multi-platform support.

Comprehensive Software Testing

Standardizes test creation and quality assurance through structured unit, integration, and E2E testing patterns.

Vue Development & TDD Workflow

Enforces a strict test-driven development cycle for Vue 3 and Nuxt 3, featuring automated E2E test generation from Gherkin acceptance criteria.

Solidity Security & Smart Contract Patterns

Implements industry-standard security patterns and audits smart contracts to prevent common blockchain vulnerabilities and exploits.

Angular Frontend Verification & Testing

Automates frontend verification for Angular 18 applications by analyzing console errors, network requests, and visual rendering via Chrome DevTools.

PCI Compliance & Payment Security

Implements PCI DSS standards and secure payment processing workflows to protect sensitive cardholder data and ensure regulatory compliance.

SAST Configuration & Security Scanning

Configures and optimizes Static Application Security Testing (SAST) tools to automate vulnerability detection and enforce secure coding standards.

Dependency Upgrade & Migration

Manages major software dependency upgrades through systematic compatibility analysis, staged rollout strategies, and comprehensive validation testing.

Python Testing Patterns

Implements comprehensive testing strategies for Python using pytest, mocking, and test-driven development.