Security & Testing Claude 技能

Aegis Multi-Tenancy Enforcer

Enforces strict multi-tenant data isolation by ensuring communityId is applied to all MongoDB queries and service logic.

GOAP Research with Ed25519 Verification

Verifies research claims and prevents hallucinations using Goal-Oriented Action Planning combined with Ed25519 cryptographic signatures.

Test-Driven Development (TDD)

Implements robust software through a strict Red-Green-Refactor cycle to ensure high code quality and reliability.

Web Application Testing Toolkit

Automates end-to-end testing and browser interactions for local web applications using Playwright and custom server management.

Verified GOAP Research Assistant

Performs high-stakes research using Goal-Oriented Action Planning and Ed25519 cryptographic signatures to eliminate hallucinations and verify source integrity.

Verified GOAP Research & Ed25519

Conducts verifiable, high-stakes research using Goal-Oriented Action Planning and Ed25519 cryptographic signatures to prevent AI hallucinations.

Web Application Testing Toolkit

Automates end-to-end testing and browser interactions for local web applications using Playwright and Python.

Modular SCIM Provisioning

Implements automated user provisioning and lifecycle management via Scalekit's Directory API and real-time webhooks.

X9.150 JWS Security Implementation

Implements and validates JWS security layers for X9.150 payment standards using expert signing and verification patterns.

PCI Compliance & Secure Payments

Implements PCI DSS requirements and secure payment handling patterns to protect cardholder data and ensure regulatory compliance.

GOAP Cryptographic Research

Performs high-integrity research using Goal-Oriented Action Planning and Ed25519 cryptographic signatures to eliminate hallucinations and verify source authenticity.

Cloudflare Turnstile Integration

Implements secure, privacy-focused bot protection and spam prevention using Cloudflare Turnstile.

GDPR Compliance Expert

Implements GDPR-compliant coding patterns and privacy-by-design principles to protect user data and ensure legal adherence.

SOC 2 Compliance Specialist

Guides developers through the implementation of SOC 2 Trust Services Criteria, from access controls to audit-ready logging and evidence collection.

Scalekit Auth for Laravel

Implements secure Scalekit SSO and authentication patterns in Laravel applications using native HTTP services and custom middleware.

Scalekit Laravel Auth Integration

Implements secure Scalekit authentication and permission-based access control for Laravel applications using native HTTP patterns.

HIPAA Compliance Guide

Provides expert guidance and technical safeguards for developing HIPAA-compliant healthcare applications and handling Protected Health Information (PHI).

PCI DSS Compliance Guidelines

Implements secure payment processing and cardholder data handling patterns following PCI DSS v4.0 standards.

Rust Unsafe & FFI Guide

Provides expert guidance and safety patterns for writing sound unsafe code and FFI bindings in Rust.

PHP Security Essentials

Implements industry-standard PHP security patterns and hardening techniques to protect applications against OWASP Top 10 vulnerabilities.

Smart Test Fixing

Systematically identifies, groups, and resolves failing test suites using an intelligent root-cause analysis workflow.

Enterprise Auth Patterns

Scaffolds production-ready authentication and authorization systems using JWT, realm-based permissions, and session state machines.

E2E Testing Workflow

Implements a structured end-to-end testing workflow using test-driven development principles and framework-agnostic guidance.

Security Review & Audit

Enforces rigorous security standards and identifies vulnerabilities across authentication, data handling, and API implementation.

React Testing Patterns

Implements comprehensive testing strategies using Vitest, React Testing Library, and Playwright for modern React applications.

Supabase Auth Patterns

Implements secure authentication and session management workflows for Next.js applications using Supabase Auth and SSR.

TDD Workflow Enforcer

Implements a rigorous test-driven development cycle ensuring 80% code coverage across unit, integration, and end-to-end tests.

Verification Loop

Standardizes code quality through a rigorous six-phase verification process covering builds, types, linting, tests, security, and diffs.