Security & Testing Claude 技能

Systematic Debugging

Enforces a rigorous, root-cause-first framework for resolving bugs by eliminating guesswork and prioritizing evidence-based investigation.

Rigorous Verification Guardrail

Ensures all code changes and task completions are backed by fresh, empirical evidence before making success claims.

Web App Testing with Playwright

Automates browser testing and UI verification for local web applications using Playwright integration.

OpenEvent Workflow Triage

Streamlines bug triage and regression testing for OpenEvent workflows using deterministic reproduction traces and invariant validation.

Solidity Security Expert

Implements industry-standard smart contract security patterns and prevents common vulnerabilities in Ethereum-based applications.

AgRAG LLM Judge

Evaluates Agentic GraphRAG performance using automated benchmarking and LLM-as-judge scoring rubrics.

Web3 Smart Contract Testing

Facilitates comprehensive testing of Solidity smart contracts using Hardhat and Foundry to ensure security, reliability, and gas efficiency.

GDPR Data Compliance & Privacy

Implements GDPR-compliant data processing, consent management systems, and automated data subject request handlers.

Data Quality Frameworks

Implements robust data validation and quality assurance using Great Expectations, dbt tests, and data contracts.

.NET Test Triage

Automates .NET test failure analysis by capturing logs, generating markdown summaries, and creating focused rerun filters.

Attack Tree Construction

Builds systematic attack trees to visualize potential threat paths and identify critical security vulnerabilities.

UI Smoke & E2E Testing

Guides the execution of UI smoke tests and Playwright E2E suites to validate frontend changes and navigation flows.

Threat Mitigation Mapping

Maps identified security threats to specific technical controls and mitigations to strengthen system architecture and defense-in-depth.

WCAG Accessibility Audit Patterns

Performs comprehensive web accessibility audits and provides remediation strategies based on WCAG 2.2 standards.

JavaScript Testing Patterns

Implements robust testing strategies for JavaScript and TypeScript applications using modern frameworks like Jest and Vitest.

Authentication & Authorization Patterns

Implements secure, scalable access control systems using modern patterns like JWT, OAuth2, and RBAC.

Baseline Governance

Enforces quality standards and prevents software regressions by implementing a "ratchet" mechanism for core project metrics.

Security Scanner

Performs automated security audits, secret detection, and vulnerability scanning across codebases, containers, and infrastructure.

Financial Calculation Correctness & Excel Parity

Validates financial logic against Excel models to ensure numerical accuracy and parity across IRR, waterfalls, and complex cash flow computations.

Test Fixture Generator

Standardizes the creation of maintainable, type-safe test data through factories and golden datasets to ensure consistent testing environments.

SimpleCov Test Coverage Agent

Analyzes and improves Ruby and Rails test coverage using SimpleCov and automated quality metrics.

Cucumber & Gherkin BDD

Implements Behavior-Driven Development (BDD) using Gherkin syntax and Cucumber step definitions across multiple programming languages.

JavaScript Unit Testing Expert

Generates maintainable, reliable JavaScript and TypeScript unit tests using Jest and industry-standard patterns.

Solidity Security Patterns

Implements secure smart contract development patterns and audits Solidity code for common blockchain vulnerabilities.

Web3 Smart Contract Testing

Facilitates comprehensive smart contract testing using Hardhat and Foundry to ensure security and gas efficiency in blockchain applications.

Playwright Best Practices

Enhances Claude Code with expert guidance for writing reliable, maintainable, and accessible Playwright end-to-end tests.

SAST Security Configuration

Configures Static Application Security Testing (SAST) tools to automate vulnerability detection and enforce security policies across the software development lifecycle.

Verified Completion Guard

Enforces rigorous verification and evidence-based reporting before claiming task completion or submitting code changes.

Testing Strategy Assistant

Designs comprehensive QA strategies and systematic testing workflows to ensure high-quality, production-ready code.

Memory Forensics

Master memory acquisition and forensic analysis to investigate security incidents and analyze malware behavior from RAM captures.