Security & Testing Claude 技能

Moai Security Threat Modeling

Analyzes system architectures using STRIDE methodology and generates production-ready IDS/IPS and WAF security rules.

Coverage Analyzer

Analyzes test coverage metrics and prioritizes testing efforts for critical code paths and untested files.

Enterprise Identity & SSO Management

Implements advanced enterprise identity and access management patterns using SAML 2.0, OIDC, and SCIM protocols.

Systematic Debugging

Enforces a rigorous, four-phase investigation framework to identify root causes and eliminate fragile patches before any code fixes are applied.

Implementation Verifier

Verifies that code implementations strictly adhere to PRD requirements without unauthorized substitutions or omissions.

Security Scanner

Identifies OWASP Top 10 vulnerabilities, hardcoded secrets, and XSS risks to ensure codebase security and compliance.

Rust Code Reviewer

Performs deep structural audits of Rust projects focusing on memory safety, ownership patterns, and idiomatic practices.

Smart Test Generator

Automatically generates comprehensive unit, integration, and E2E tests by detecting project frameworks and applying best-practice patterns.

Infrastructure Security Reviewer

Audits infrastructure-as-code and cloud configurations to identify security vulnerabilities, hardcoded secrets, and compliance gaps.

Root Cause Tracing

Systematically traces software bugs backward through the call stack to identify and resolve the original trigger.

Team Codex Code Validator

Enforces Kotlin and Spring Boot architectural standards through automated quality gate checks and reactive pattern validation.

Systematic Debugging

Implements a rigorous, four-phase debugging methodology to identify root causes and prevent guesswork in software troubleshooting.

Systematic Debugging Workflow

Implements a rigorous four-phase framework to identify root causes and eliminate bugs through evidence-based analysis rather than guesswork.

MDT Development Smoke Test

Verifies the integrity of local Codex development environments by running automated smoke checks on tool configurations and workflows.

Systematic Debugging

Implements a rigorous four-phase framework to identify root causes and apply permanent fixes for technical bugs and system failures.

Behavior Tree Validator

Validates py_trees behavior trees for syntactic correctness, action availability, and semantic consistency in robotic workflows.

MDT Setup & Workflow Verifier

Verifies MDT tool adapters and local workflow contracts to ensure environment readiness without requiring live model calls.

Security Validation Scanner

Automates pre-merge security scans to detect hardcoded secrets, insecure SSH configurations, and non-portable paths.

Eval Framework

Standardizes and compares AI-generated evaluations to ensure consistency, accuracy, and reproducibility across multiple runs.

MDT Codex Verification

Verifies and audits local Codex environment setups and workflow contracts to ensure development readiness.

Code Review Gate

Enforces human-in-the-loop validation for security-sensitive paths and high-complexity code changes within the Claude Code environment.

Security & Compliance Validation

Hardens software projects through automated security scanning, vulnerability detection, and comprehensive compliance auditing.

Security Analyzer

Performs comprehensive security audits across codebases, dependencies, and infrastructure to identify vulnerabilities and provide automated remediation plans.

Systematic Debugging

Employs a rigorous, evidence-based methodology to identify and resolve the root cause of software bugs and test failures.

React Component Testing

Tests React components and user flows using React Testing Library and Playwright to ensure frontend reliability and accessibility.

Test Writer

Generates comprehensive unit, integration, and end-to-end tests across multiple programming languages and frameworks using standardized templates.

Project Validation Expert

Performs comprehensive code quality, security, and performance validation using deep research-driven analysis for production readiness.

Automated Testing & QA

Generates, reviews, and executes comprehensive pytest-based testing suites to ensure code reliability, security, and performance.

Baseline Quality Checker

Automates Ruby code quality audits and regression analysis to maintain high standards throughout the development lifecycle.

Testing Coverage Optimizer

Enforces standardized testing coverage protocols to ensure code reliability and adherence to project quality metrics.