Security & Testing Claude 技能

Test Coverage Analysis

Analyzes test coverage reports and identifies critical code gaps to improve software reliability in Python and JavaScript projects.

TDD Workflow

Enforces a rigorous test-driven development cycle with standardized patterns for unit, integration, and E2E testing.

Advanced JS Mocking Patterns

Implements sophisticated JavaScript testing strategies for module isolation, timer manipulation, and mock lifecycle management.

Firebase Authentication Patterns

Implements secure Firebase Authentication flows including OAuth, session management, and protected routes for web applications.

Firestore Security Rules Generator

Generates robust, production-ready Firestore security rules with patterns for RBAC, multi-tenancy, and schema validation.

Python Code Review & Linting

Enhances Python code quality through automated Ruff linting, security vulnerability detection, and robust mypy type checking.

Pytest Modern Test Patterns

Implements standardized pytest structures including fixtures, parametrization, and the AAA pattern to build robust Python test suites.

Privacy & Consent Compliance

Implements privacy-first development patterns to ensure GDPR and CCPA compliance through automated consent management and data minimization.

QA Strategy & Quality Metrics

Guides the implementation of robust testing pyramids and software maintainability metrics to reduce technical debt and improve code health.

TypeScript Component Testing

Implements robust, accessible UI component tests using React Testing Library and modern TypeScript patterns.

Red/Blue Team Validator

Stress-tests decisions, strategies, and architectures through iterative adversarial Red/Blue team simulations to uncover and mitigate vulnerabilities.

Firebase Authentication Patterns

Implements secure Firebase Authentication flows including OAuth, session management, and server-side protected routes.

TypeScript Component Testing

Implements industry-standard Jest, Vitest, and React Testing Library patterns to ensure robust, accessible frontend components.

MCP Protocol Compliance Testing

Validates Model Context Protocol (MCP) implementations for JSON-RPC 2.0 compliance, schema integrity, and async execution reliability.

Access Control Patterns

Implements secure authorization logic by auditing and applying RBAC, ABAC, and IDOR prevention patterns.

Python Code Review & Linting

Automates Python code analysis to enforce security standards, fix anti-patterns, and maintain strict linting using Ruff and Mypy.

Authentication & Session Security

Secures applications by implementing JWT validation, OAuth2 flows, and robust session management patterns.

Security Testing

Hardens software applications by providing comprehensive security auditing, vulnerability scanning, and penetration testing guidance.

Pytest Modern Test Patterns

Implements high-quality Python testing suites using modern pytest structures, the AAA pattern, and advanced fixture management.

LSP Type Safety Checker

Verifies code type safety and function signature compatibility using Language Server Protocol data to prevent runtime errors.

Advanced JS Mocking Patterns

Master complex testing scenarios in Jest and Vitest using advanced module mocking, spies, and temporal control techniques.

AI Security & Pentesting Toolkit

Conducts automated security audits and penetration tests using AI-driven discovery, vulnerability scanning, and structured analysis.

Comprehensive Code Review

Performs a rigorous 7-point code audit covering security, performance, and maintainability to ensure production-grade software quality.

Forensic Analyst

Conducts comprehensive digital forensics investigations, reconstructs attack timelines, and analyzes system artifacts using LimaCharlie's security operations capabilities.

Test Execution Manager

Orchestrates automated test suites using subagents with intelligent incremental timeout escalation and comprehensive coverage verification.

Eval Harness for Claude Code

Implements a formal Eval-Driven Development (EDD) framework to ensure AI-generated code meets quality standards and avoids regressions.

TDD Workflow & Test Automation

Enforces rigorous test-driven development practices and high code coverage standards to ensure reliable software delivery.

Verification Loop

Automates a multi-phase quality assurance workflow to validate builds, types, tests, and security before code submission.

Security Review & Audit

Implements rigorous security checklists and industry-standard patterns to protect applications from vulnerabilities, data leaks, and unauthorized access.

Splunk Security & RBAC Management

Automates Splunk security operations including JWT token management, role-based access control verification, and ACL configuration.