Security & Testing Claude 技能

Development Workflow Specialist

Optimizes the full software development lifecycle through integrated TDD, automated PR reviews, and AI-powered debugging.

Vulnerable Secret Extraction

Extracts hidden secrets, keys, and flags from protected or obfuscated binaries through systematic reverse engineering and analysis techniques.

Headless Terminal

Implements programmatic terminal interfaces to control shell sessions through terminal emulation and pseudo-terminal wrappers.

Headless Terminal

Implements programmatic terminal interfaces to control interactive shell sessions and automate command-line program interactions.

COBOL Modernization

Translates legacy COBOL programs into modern programming languages while ensuring functional equivalence and byte-level output compatibility.

Cancel Async Tasks

Implements robust Python asyncio task cancellation and signal handling patterns to ensure graceful shutdowns and proper resource cleanup.

SQLite with gcov Coverage

Configures and troubleshoots C/C++ projects with gcov instrumentation to ensure accurate code coverage data generation and analysis.

Cancel Async Tasks

Implements robust Python asyncio task cancellation and signal handling for graceful application shutdown and resource cleanup.

OCaml GC Debugging

Diagnoses and resolves low-level memory management bugs in the OCaml garbage collector runtime, specifically targeting segmentation faults and pointer arithmetic errors.

Scientific Thinking Mode

Implements a rigorous, hypothesis-driven scientific method to solve complex software bugs and architectural challenges.

FEAL Differential Cryptanalysis

Implements rigorous differential cryptanalysis attacks to recover keys from FEAL and similar weak Feistel block ciphers.

Vulnerable Secret Extraction

Analyzes and exploits vulnerable executables to extract hidden flags, secrets, and cryptographic keys using static and dynamic analysis techniques.

OCaml GC Debugging and Repair

Diagnoses and resolves memory management issues, pointer arithmetic bugs, and runtime corruption within the OCaml garbage collector.

Break Filter JS from HTML

Provides a systematic methodology for identifying and bypassing HTML/JavaScript sanitization filters in security testing environments.

ELF Binary Data Extraction

Parses and extracts structured data from ELF binary files by validating headers, mapping segments, and ensuring accurate data type conversion.

Fix Code Vulnerability

Identifies, analyzes, and patches security flaws and CWE-classified vulnerabilities using a systematic workflow and thorough test-driven verification.

Extract ELF

Extracts memory values and structured data from Executable and Linkable Format (ELF) binary files across various architectures and endianness types.

XSS Filter Bypass

Provides a systematic methodology for bypassing HTML sanitizers and crafting cross-site scripting (XSS) payloads in authorized security testing environments.

Filter JS From HTML

Sanitizes HTML documents by removing JavaScript injection vectors and executable content while strictly preserving original formatting and structure.

HTML JavaScript & XSS Filter

Removes JavaScript and XSS attack vectors from HTML documents while maintaining the original file formatting and structure.

OpenSSL Self-Signed Certificate Creation

Generates and verifies self-signed SSL/TLS certificates using OpenSSL for secure local development and testing environments.

Firebase Authentication Specialist

Implements secure, multi-platform authentication solutions using the Firebase and Google Identity ecosystems.

Testing Anti-Pattern Guard

Prevents common software testing pitfalls like over-mocking, production code pollution, and incomplete test data structures.

Scale Game

Validates architectural decisions by simulating extreme operational constraints and volume scenarios to identify hidden technical bottlenecks.

Root Cause Tracing

Traces software bugs backward through the execution chain to identify and fix original triggers at the source.

Testing Skills with Subagents

Applies the Red-Green-Refactor TDD cycle to verify and bulletproof process documentation against AI rationalizations.

Code Quality & Testing

Generates and improves comprehensive test suites using TDD principles to ensure high code reliability and coverage.

JavaScript Testing Patterns

Implements robust testing architectures using Jest and Vitest to ensure code quality across JavaScript and TypeScript projects.

Automated Code Testing & TDD

Generates comprehensive test suites and improves code coverage using Test-Driven Development (TDD) principles.

Cybersecurity Analyst

Performs expert security audits, threat modeling, and vulnerability assessments using industry-standard frameworks like MITRE ATT&CK and STRIDE.