Security & Testing Claude 技能

TON Vulnerability Scanner

Scans TON blockchain smart contracts for platform-specific security vulnerabilities including logic errors and token handling flaws.

Burp Suite Project Parser

Extracts and analyzes security audit findings, proxy history, and HTTP traffic from Burp Suite project files via the command line.

Constant-Time Crypto Testing

Detects and remediates timing side-channel vulnerabilities in cryptographic implementations to prevent secret data leakage.

Cosmos Vulnerability Scanner

Identifies consensus-critical vulnerabilities and security flaws in Cosmos SDK modules and CosmWasm smart contracts to prevent chain halts and fund loss.

Differential Security Review

Performs deep, security-focused differential analysis on code changes to identify risks, calculate blast radius, and prevent vulnerabilities.

Fuzzing Obstacle Bypass

Bypasses anti-fuzzing patterns like checksums and non-deterministic logic using conditional compilation to improve code coverage during security testing.

LibAFL Fuzzing Framework

Builds highly customizable and high-performance fuzzers using a modular Rust-based library for advanced security testing.

Subagent Quality Reviewer

Analyzes and optimizes Claude Code subagents based on industry best practices to ensure high-quality, reliable AI workflows.

DWARF Debug Expert

Analyzes DWARF debug files and provides expert guidance on DWARF standards (v3-v5) for binary analysis and tool development.

Atheris Python Fuzzer

Performs coverage-guided fuzz testing for pure Python code and C extensions to detect memory corruption and complex logic errors.

Claude Skill Reviewer

Audits and improves Claude Code Skills by providing quality reports, best practice analysis, and automated fixes.

Audit Context Builder

Facilitates ultra-granular, line-by-line architectural analysis to build comprehensive system context for security audits.

Wycheproof Crypto Testing

Validates cryptographic implementations using a comprehensive suite of test vectors to prevent known vulnerabilities and edge cases.

Cargo Fuzz for Rust

Implements automated fuzz testing for Rust projects using the libFuzzer backend and Cargo integration.

Load Testing Adapter

Generates and executes comprehensive load test scripts to validate application performance and identify architectural bottlenecks.

TDD Implementation Cycle

Implements production-ready code using rigorous TDD/ATDD principles and the Red-Green-Refactor cycle.

TDD Orchestration Workflow

Orchestrates a comprehensive Test-Driven Development (TDD) and Acceptance Test-Driven Development (ATDD) workflow using the Red-Green-Refactor cycle.

Pytest Profiling & Optimization

Diagnoses and speeds up slow Python test suites using systematic profiling and targeted optimization patterns.

Pytest Baseline & Coverage Runner

Executes Pytest suites with comprehensive coverage analysis and baseline tracking to detect regressions and monitor testing trends.

Test Design & TDD Architect

Designs comprehensive test suites and generates structured TDD specifications using a Top-Down approach to define software interfaces.

Playwright Testing Framework

Automates end-to-end browser testing and web automation across Chromium, Firefox, and WebKit with native WSL2 support.