Security & Testing Claude 技能

Security Review Auditor

Audits source code for vulnerabilities and enforces industry-standard security patterns across authentication, data handling, and API development.

Eval Harness for Claude Code

Implements a formal eval-driven development framework to measure, test, and improve AI coding reliability through structured evaluations.

Test-Driven Development Workflow

Enforces rigorous test-driven development practices to ensure high code quality and comprehensive test coverage across unit, integration, and E2E layers.

Code Quality Verification Loop

Automates multi-phase quality checks including builds, type-checking, linting, and testing to ensure production-ready code.

Security Review & Audit

Implements rigorous security checklists and industry-standard patterns to protect applications from vulnerabilities, data leaks, and unauthorized access.

Verification Loop

Automates a multi-phase quality assurance workflow to validate builds, types, tests, and security before code submission.

Test Execution Manager

Orchestrates automated test suites using subagents with intelligent incremental timeout escalation and comprehensive coverage verification.

Access Control Patterns

Implements secure authorization logic by auditing and applying RBAC, ABAC, and IDOR prevention patterns.

TypeScript Component Testing

Implements industry-standard Jest, Vitest, and React Testing Library patterns to ensure robust, accessible frontend components.

Firebase Authentication Patterns

Implements secure Firebase Authentication flows including OAuth, session management, and server-side protected routes.

QA Strategy & Quality Metrics

Guides the implementation of robust testing pyramids and software maintainability metrics to reduce technical debt and improve code health.

Privacy & Consent Compliance

Implements privacy-first development patterns to ensure GDPR and CCPA compliance through automated consent management and data minimization.

Python Code Review & Linting

Enhances Python code quality through automated Ruff linting, security vulnerability detection, and robust mypy type checking.

Secure HTTP Headers

Configures industry-standard HTTP security headers and cookie policies to protect web applications from common vulnerabilities.

Python Testing Patterns

Implements advanced Pytest patterns, fixtures, and mocking strategies to ensure robust Python code quality and test coverage.

Firebase Authentication Patterns

Implements secure Firebase Authentication flows including OAuth, session management, and protected routes for web applications.

TDD Workflow for AWS Automation

Enforces a strict Red-Green-Refactor testing methodology for Python-based AWS infrastructure and CLI tools.

Threat Model Security Testing

Generates automated security test cases and attack scenarios directly from threat models to verify controls and prevent regressions.

Computer Use Automation & QA Testing

Automates web application testing by generating Playwright-based test harnesses and natural-language goal files for Gemini 2.5 Computer Use.

Pytest Python Testing

Automates the creation and management of robust Python test suites using the industry-standard pytest framework.

DevOps Security Auditor

Automates security auditing and vulnerability assessments within development workflows to identify dependencies, secrets, and compliance risks.

Multi-Perspective Code Reviewer

Performs deep, multi-agent code analysis to identify bugs, security risks, and architectural improvements without modifying source code.

MCP Testing Suite

Provides standardized patterns and utilities for unit testing and LLM-driven evaluation of Model Context Protocol (MCP) tools.

ERC-4337 Privacy Wallet Dev

Builds secure, privacy-preserving ERC-4337 account abstraction wallets for vehicle identity and sensitive data protection.

BD Test Design

Architects comprehensive software testing strategies and implementations across unit, integration, and E2E layers.

Bug Finder & Security Auditor

Performs deep security audits and bug detection on local branch changes using a rigorous five-phase analysis process.

Bug & Security Auditor

Performs systematic security audits and bug detection on local code changes using a structured multi-phase review process.

Bug Finder & Security Auditor

Identifies security vulnerabilities, logical bugs, and code quality issues within local Git branch changes.

Professional Test Design & Strategy

Guides the creation of robust, high-coverage software tests using industry-standard design patterns and heuristics.

Quality Assurance Guide

Enforces rigorous code standards and streamlines pre-commit quality checks to ensure production-ready software.