Security & Testing Claude 技能

Semgrep API & Fix Conventions

Standardizes Semgrep integrations with specific rules for API communication, security validation, and automated vulnerability remediation.

Visual Testing & Regression

Automates visual regression testing to detect UI inconsistencies across browsers and viewports using tools like Percy, Chromatic, and Playwright.

Mutation Testing

Measures test suite effectiveness by injecting artificial bugs into code to identify gaps in test coverage and logic.

Fuzzing Obstacle Bypass

Bypasses anti-fuzzing patterns like checksums and non-deterministic logic using conditional compilation to improve code coverage during security testing.

Algorand Smart Contract Auditor

Scans Algorand smart contracts for security vulnerabilities to ensure robust and secure blockchain applications.

Requirement Traceability Matrix

Generates comprehensive traceability matrices mapping requirements to test cases for complete software coverage visibility.

Secure Smart Contract Workflow

Guides developers through the Trail of Bits 5-step secure development workflow to audit and harden smart contracts.

AI Test Generator

Generates comprehensive, multi-framework unit tests by analyzing code structure and identifying critical edge cases.

Code Quality & Documentation Standards

Enforces strict test-driven development (TDD) principles and structured documentation practices to maintain high-quality, maintainable codebases.

Test Generation Engine

Generates comprehensive unit and integration tests across multiple programming languages by following local project conventions.

Systematic Debugging

Enforces a rigorous four-phase debugging process to identify root causes and implement permanent fixes rather than temporary patches.

Playwright & Frontend Testing

Implement, debug, and stabilize frontend tests across unit, integration, and E2E layers with a focus on determinism and canvas-based games.

AIOS Quality Advisor & Test Architect

Automates comprehensive quality gate reviews, risk assessments, and test architecture analysis to ensure software reliability.

AIOS Test Architect & Quality Advisor

Conducts high-level test architecture reviews and quality gate assessments to ensure robust, production-ready code delivery.

Testing Strategy & Implementation

Implements comprehensive software testing frameworks using standardized unit, integration, and performance testing patterns.

Datarails API Diagnostic & Field Test

Tests Datarails finance API field compatibility to optimize data aggregation performance and reliability.

Automated Code Review

Analyzes source code for quality, security vulnerabilities, and anti-patterns to ensure production-grade standards.

Security Scan

Conducts comprehensive OWASP-style security audits to identify and remediate vulnerabilities within your codebase.

TDD Workflow

Automates the Red-Green-Refactor cycle to ensure code reliability and high-quality implementation through test-driven development.

Testing Strategy

Implements comprehensive testing architectures including unit, integration, and end-to-end tests using industry-standard patterns and coverage metrics.

TDD Workflow

Implements a strict Red-Green-Refactor methodology to ensure high-quality, tested code through automated multi-agent orchestration.

Automated Code Verification Loop

Validates code implementations against requirements through automated linting, testing, and requirement matching.

Security Scan

Performs comprehensive OWASP-style security audits to identify vulnerabilities and provide actionable remediation steps within your codebase.

API Load & Stress Tester

Executes automated load and stress testing to validate API performance, scalability, and system stability.

Code Verification Loop

Verifies that code changes satisfy original requirements through automated syntax checks, testing, and regression scans.

End-to-End Testing & Automation

Generates and executes comprehensive end-to-end tests across multiple frameworks and browsers to ensure robust user journeys.

Aegis Multi-Tenancy Enforcer

Enforces strict multi-tenant data isolation by ensuring communityId is applied to all MongoDB queries and service logic.

GOAP Research with Ed25519 Verification

Verifies research claims and prevents hallucinations using Goal-Oriented Action Planning combined with Ed25519 cryptographic signatures.

Test-Driven Development (TDD)

Implements robust software through a strict Red-Green-Refactor cycle to ensure high code quality and reliability.

Web Application Testing Toolkit

Automates end-to-end testing and browser interactions for local web applications using Playwright and custom server management.