Security & Testing Claude 技能

Work Verification & Fact-Checker

Ensures the accuracy of AI outputs by systematically cross-referencing all claims with file-based evidence and real-world data.

Test Coverage Mapping

Maps product features to test suites to identify critical testing gaps and perform risk-based quality analysis.

Deep Coverage Analysis

Analyzes test coverage in depth to identify uncovered lines, branches, and functions with actionable reporting.

Spec Validation Enforcer

Validates software specifications against requirements to ensure completeness, consistency, and testability within development workflows.

Accessibility Auditor

Performs comprehensive WCAG 2.1 AA accessibility audits to ensure web applications are inclusive and compliant.

Semgrep API & Fix Conventions

Standardizes Semgrep integrations with specific rules for API communication, security validation, and automated vulnerability remediation.

Visual Testing & Regression

Automates visual regression testing to detect UI inconsistencies across browsers and viewports using tools like Percy, Chromatic, and Playwright.

Mutation Testing

Measures test suite effectiveness by injecting artificial bugs into code to identify gaps in test coverage and logic.

Requirement Traceability Matrix

Generates comprehensive traceability matrices mapping requirements to test cases for complete software coverage visibility.

AI Test Generator

Generates comprehensive, multi-framework unit tests by analyzing code structure and identifying critical edge cases.

Test Generation Engine

Generates comprehensive unit and integration tests across multiple programming languages by following local project conventions.

Testing Strategy & Implementation

Implements comprehensive software testing frameworks using standardized unit, integration, and performance testing patterns.

Datarails API Diagnostic & Field Test

Tests Datarails finance API field compatibility to optimize data aggregation performance and reliability.

Automated Code Review

Analyzes source code for quality, security vulnerabilities, and anti-patterns to ensure production-grade standards.

Security Scan

Conducts comprehensive OWASP-style security audits to identify and remediate vulnerabilities within your codebase.

TDD Workflow

Automates the Red-Green-Refactor cycle to ensure code reliability and high-quality implementation through test-driven development.

Testing Strategy

Implements comprehensive testing architectures including unit, integration, and end-to-end tests using industry-standard patterns and coverage metrics.

TDD Workflow

Implements a strict Red-Green-Refactor methodology to ensure high-quality, tested code through automated multi-agent orchestration.

Automated Code Verification Loop

Validates code implementations against requirements through automated linting, testing, and requirement matching.

Security Scan

Performs comprehensive OWASP-style security audits to identify vulnerabilities and provide actionable remediation steps within your codebase.

Code Verification Loop

Verifies that code changes satisfy original requirements through automated syntax checks, testing, and regression scans.

End-to-End Testing & Automation

Generates and executes comprehensive end-to-end tests across multiple frameworks and browsers to ensure robust user journeys.

Aegis Multi-Tenancy Enforcer

Enforces strict multi-tenant data isolation by ensuring communityId is applied to all MongoDB queries and service logic.

GOAP Research with Ed25519 Verification

Verifies research claims and prevents hallucinations using Goal-Oriented Action Planning combined with Ed25519 cryptographic signatures.

Test-Driven Development (TDD)

Implements robust software through a strict Red-Green-Refactor cycle to ensure high code quality and reliability.

Web Application Testing Toolkit

Automates end-to-end testing and browser interactions for local web applications using Playwright and custom server management.

Verified GOAP Research Assistant

Performs high-stakes research using Goal-Oriented Action Planning and Ed25519 cryptographic signatures to eliminate hallucinations and verify source integrity.

Verified GOAP Research & Ed25519

Conducts verifiable, high-stakes research using Goal-Oriented Action Planning and Ed25519 cryptographic signatures to prevent AI hallucinations.

Web Application Testing Toolkit

Automates end-to-end testing and browser interactions for local web applications using Playwright and Python.

Modular SCIM Provisioning

Implements automated user provisioning and lifecycle management via Scalekit's Directory API and real-time webhooks.