Security & Testing Claude 技能

API Test Suite Builder

Automatically generates production-ready API test suites by scanning route definitions across multiple web frameworks.

Spring Boot Verification Loop

Validates Spring Boot projects through automated builds, static analysis, security scans, and test coverage reporting.

TestRail Playwright Sync

Synchronizes Playwright automation tests with TestRail test management for seamless bidirectional reporting and test case generation.

Eval Harness for Claude Code

Implements a formal Eval-Driven Development (EDD) framework to ensure AI-generated code meets quality standards and avoids regressions.

TDD Workflow & Test Automation

Enforces rigorous test-driven development practices and high code coverage standards to ensure reliable software delivery.

Chrome Extension Debugging Guide

Provides comprehensive strategies and code patterns for troubleshooting Chrome Extension service workers, content scripts, and communication layers.

Verification Loop

Automates a multi-phase quality assurance cycle to ensure code reliability and security before deployment.

Eval Harness for Claude Code

Implements an eval-driven development framework to define, track, and measure the reliability of AI-generated code.

Advanced JS Mocking Patterns

Master complex testing scenarios in Jest and Vitest using advanced module mocking, spies, and temporal control techniques.

Pytest Modern Test Patterns

Implements high-quality Python testing suites using modern pytest structures, the AAA pattern, and advanced fixture management.

Security Testing

Hardens software applications by providing comprehensive security auditing, vulnerability scanning, and penetration testing guidance.

Authentication & Session Security

Secures applications by implementing JWT validation, OAuth2 flows, and robust session management patterns.

Python Code Review & Linting

Automates Python code analysis to enforce security standards, fix anti-patterns, and maintain strict linting using Ruff and Mypy.

MCP Protocol Compliance Testing

Validates Model Context Protocol (MCP) implementations for JSON-RPC 2.0 compliance, schema integrity, and async execution reliability.

Red/Blue Team Validator

Stress-tests decisions, strategies, and architectures through iterative adversarial Red/Blue team simulations to uncover and mitigate vulnerabilities.

Security Audit

Conducts comprehensive security vulnerability assessments using over 120 specialized checks including OWASP compliance and database security.

TypeScript Component Testing

Implements robust, accessible UI component tests using React Testing Library and modern TypeScript patterns.

Pytest Modern Test Patterns

Implements standardized pytest structures including fixtures, parametrization, and the AAA pattern to build robust Python test suites.

Accessibility Remediation

Automatically detects and resolves WCAG 2.2 accessibility violations in web components with AI-powered code suggestions and one-click application.

Storybook Testing Suite

Configures comprehensive testing for Storybook 9 components, including interaction, accessibility, and visual regression workflows.

Advanced JS Mocking Patterns

Implements sophisticated JavaScript testing strategies for module isolation, timer manipulation, and mock lifecycle management.

Test Coverage Analysis

Analyzes test coverage reports and identifies critical code gaps to improve software reliability in Python and JavaScript projects.

Test Coverage Analysis

Analyzes code coverage reports and identifies critical testing gaps to improve software reliability across Python and JavaScript projects.

MCP Protocol Compliance Testing

Validates MCP servers for JSON-RPC 2.0 compliance and Pydantic schema integrity using standardized testing patterns.

Python Testing Patterns

Implements robust Python testing strategies using pytest, mocking, and structured test organization to ensure code quality.

QA Strategy & Quality Metrics

Implements robust testing frameworks and quality metrics to manage technical debt and improve code maintainability.

OWASP Security Code Analysis

Detects and mitigates OWASP Top 10 security vulnerabilities within source code using automated AI-powered audits.

TDD Discipline & Testing Automation

Enforces strict Test-Driven Development workflows by requiring failing tests before implementation and matching project-specific testing patterns.

Structured Bugfix Workflow

Implements a rigorous, test-driven debugging methodology to identify, reproduce, and permanently fix software bugs.

TDD Workflow Enforcer

Enforces rigorous test-driven development cycles with mandatory 80% coverage across unit, integration, and E2E tests.