Security & Testing Claude 技能

Verified Completion Guard

Enforces rigorous verification and evidence-based reporting before claiming task completion or submitting code changes.

Testing Strategy Assistant

Designs comprehensive QA strategies and systematic testing workflows to ensure high-quality, production-ready code.

Claude Plugin Structure Validator

Validates Claude Code plugin architectures, schemas, and metadata to ensure compliance with publishing standards.

Security Review & Vulnerability Analysis

Performs systematic security audits and vulnerability assessments based on OWASP guidelines to ensure robust application architecture.

Test-Driven Development (TDD)

Enforces a rigorous Red-Green-Refactor workflow to ensure all production code is verified by failing tests before implementation.

Security Attack Tree Builder

Generates systematic attack path visualizations and threat models to identify defense gaps and communicate security risks.

Protocol Reverse Engineering

Analyzes and documents network protocols through traffic capture, packet dissection, and binary structure identification.

Auth Implementation Patterns

Implements secure authentication and authorization systems using JWT, OAuth2, session management, and role-based access control patterns.

Web Application Testing

Automates local web application testing and UI debugging using Playwright and automated server management.

Test-Driven Development Workflow

Enforces a strict Red-Green-Refactor cycle to ensure code reliability and high test coverage from the start.

JavaScript Testing Patterns

Implement robust testing strategies for JavaScript and TypeScript applications using modern frameworks like Jest and Vitest.

Verification Before Completion

Enforces a mandatory verification protocol requiring empirical evidence before any task is marked as complete or successful.

DBHub Database Testing

Automates and troubleshoots unit and integration tests for database connectors using Testcontainers and Vitest.

Solidity & Foundry Development

Develops, tests, and audits secure Solidity smart contracts using the Foundry framework and industry-standard security patterns.

Automated Testing & Coverage

Writes comprehensive automated tests across all layers to validate functionality and ensure high code coverage.

Better Auth Integration

Implements comprehensive, framework-agnostic authentication and authorization systems using the Better Auth TypeScript framework.

Network Lab 101

Configures and tests common network services like HTTP, SNMP, and SMB to create controlled penetration testing lab environments.

BAP Identity Manager

Manages Bitcoin Attestation Protocol (BAP) identity files for secure creation, encryption, and test fixture generation.

Web3 Smart Contract Testing

Streamlines the testing and validation of Ethereum smart contracts using Hardhat and Foundry frameworks.

PCI Compliance Security

Implements PCI DSS requirements to ensure secure handling, storage, and transmission of cardholder data in payment systems.

Test-Driven Development (TDD)

Enforces a strict Red-Green-Refactor workflow to ensure high-quality, bug-free production code through mandatory failing tests.

Project Health Auditor

Analyzes codebase health across structural integrity, security vulnerabilities, performance bottlenecks, and code stability metrics.

DBHub Testing & Integration

Executes and troubleshoots comprehensive test suites for DBHub, specializing in database integration tests and Testcontainers orchestration.

CLI Debug & Testing Workflow

Simplifies the debugging and extension of CLI applications through systematic build, test, and conversation cloning workflows.

Solidity & Foundry Smart Contract Suite

Streamlines the development, testing, auditing, and deployment of secure Solidity smart contracts using the Foundry framework.

Web3 Smart Contract Testing

Automates comprehensive smart contract testing using Hardhat and Foundry to ensure security, gas efficiency, and protocol reliability.

Route Tester for Authenticated APIs

Tests and validates authenticated API endpoints using cookie-based JWT authentication and automated testing scripts.

Better Auth Integration

Implements secure, framework-agnostic authentication and authorization using the Better Auth TypeScript framework.

Solidity & Foundry Smart Contracts

Builds, tests, and audits secure Solidity smart contracts using the high-performance Foundry framework.

BAP Identity Manager

Manages Bitcoin Attestation Protocol (BAP) identities and secure encrypted backups using specialized command-line tools.