Security & Testing Claude 技能

Test-Driven Development (TDD)

Enforces a strict Red-Green-Refactor workflow to ensure high-quality, verified production code through test-first implementation.

JUDO Security Authentication Flow

Implements and manages comprehensive OAuth2 and OpenID Connect authentication pipelines within the JUDO Runtime Core.

Red Team Tactics & Adversary Simulation

Implements adversary simulation principles and security auditing workflows based on the MITRE ATT&CK framework.

WebSpec Subdomain Security & Architecture

Implements secure subdomain isolation, strict cookie scoping, and token-bound communication patterns for WebSpec environments.

Systematic Debugging

Enforces a rigorous four-phase debugging methodology to identify root causes and implement permanent fixes for complex software issues.

Wireshark Network Traffic Analysis

Analyzes and inspects network traffic using Wireshark for security audits, performance troubleshooting, and protocol analysis.

Solidity Security Patterns

Implements secure smart contract development patterns and audits Solidity code for common blockchain vulnerabilities.

Memory Forensics

Master memory acquisition and forensic analysis to investigate security incidents and analyze malware behavior from RAM captures.

Bats Testing Patterns

Provides comprehensive guidance and implementation patterns for the Bash Automated Testing System (Bats) to ensure robust shell script quality.

Security Scanning & Auditing

Conducts comprehensive security audits, vulnerability scans, and network assessments using industry-standard tools and methodologies.

GDPR Data Handling & Privacy Compliance

Implements GDPR-compliant data processing, consent management systems, and privacy-by-design controls for applications handling EU personal data.

E2E Testing Patterns

Implements robust end-to-end testing suites using Playwright and Cypress to ensure application reliability and prevent regressions.

STRIDE Threat Analysis Patterns

Identifies system vulnerabilities and security risks using the industry-standard STRIDE threat modeling methodology.

Verification Before Completion

Enforces a mandatory evidence-first workflow by requiring successful command execution before any work is marked as complete.

Production Code Auditor

Transforms entire codebases into enterprise-grade, production-ready systems through autonomous deep-scanning and automated refactoring.

Python Testing Patterns

Implements robust Python testing strategies using pytest, fixtures, and mocking to ensure code reliability and high coverage.

Threat Mitigation Mapping

Maps identified security threats to specific controls and mitigations to strengthen system defenses and prioritize remediation.

Binary Analysis Patterns

Master the art of reverse engineering with comprehensive patterns for disassembly, decompilation, and binary logic reconstruction.

Security Requirement Extraction

Transforms threat analysis and business context into actionable security requirements, user stories, and test cases.

Burp Suite Web Application Testing

Conducts professional web application security testing and vulnerability assessment using Burp Suite's integrated toolset.

Web Application Testing Toolkit

Enables automated end-to-end testing and UI interaction for local web applications using Playwright and integrated server management.

Burp Suite Web Application Testing

Executes comprehensive web application security testing and vulnerability scanning using Burp Suite's integrated toolset.

Wireshark Network Traffic Analysis

Analyzes network traffic using Wireshark to capture, filter, and troubleshoot network protocols and security anomalies.

DryRun Security Remediation

Remediates security vulnerabilities identified by DryRunSecurity by applying context-aware fixes grounded in authoritative documentation.

API Security Best Practices

Implements robust security patterns for APIs, including authentication, authorization, input validation, and protection against common vulnerabilities.

Shodan Security Reconnaissance

Performs advanced reconnaissance and vulnerability discovery for internet-exposed devices using the Shodan search engine.

API Security Best Practices

Secures backend services by implementing robust authentication, authorization, input validation, and rate-limiting patterns.

Linux Privilege Escalation

Performs systematic privilege escalation assessments on Linux systems to identify and exploit security misconfigurations for root-level access.

Ethical Hacking Methodology

Guides users through the complete penetration testing lifecycle, from reconnaissance and vulnerability scanning to exploitation and professional reporting.

SQL Injection Security Testing

Executes comprehensive SQL injection vulnerability assessments to identify database flaws and validate input sanitization.