Security & Testing Claude 技能

Verified Completion Workflow

Enforces rigorous, evidence-based verification protocols before any task is marked as complete or committed to a repository.

Test-Driven Development (TDD)

Enforces a strict Red-Green-Refactor workflow to ensure all production code is verified by failing automated tests before implementation.

Systematic Debugging

Enforces a rigorous, four-phase methodology to identify root causes and implement reliable fixes for software defects.

GraphQL Depth Limit Security Testing

Identifies and tests GraphQL API denial-of-service vulnerabilities through recursive nesting and query complexity analysis.

Test-Driven Development (TDD) Workflow

Enforces a strict Red-Green-Refactor cycle to ensure code reliability and high-quality software design.

Hardening Docker Containers for Production

Secures Docker environments by implementing CIS Benchmark standards and industry-leading container hardening practices.

Web Vulnerability Triage & Risk Rating

Triages web application vulnerability findings from DAST and SAST scanners using the OWASP Risk Rating Methodology to prioritize remediation efforts.

MISP Threat Intelligence Aggregator

Automates the deployment and management of MISP to aggregate, correlate, and distribute threat intelligence feeds across security infrastructures.

BeyondCorp Zero Trust Implementation

Implements Google's BeyondCorp zero trust security model to replace traditional VPNs with identity-aware, context-based access controls.

Gamma Data Compliance & Privacy

Automates data privacy, GDPR compliance, and retention policies for Gamma integrations.

Ideogram Enterprise RBAC

Configures role-based access control, SSO integration, and credit-based budget management for Ideogram AI image generation.

Web Security Headers Audit

Audits web application HTTP response headers to identify missing or misconfigured security protections like CSP, HSTS, and Secure cookies.

Fuzzing Dictionary Techniques

Optimizes fuzzer performance by providing domain-specific tokens to guide parsers and protocol handlers toward deeper code paths.

Deepgram Enterprise RBAC

Implements secure role-based access control and API key management for enterprise Deepgram integrations.

Cloudflare DDoS Mitigation Implementation

Configures multi-layer Cloudflare security controls to protect web infrastructure from volumetric, protocol, and application-layer DDoS attacks.

Wycheproof Cryptographic Testing

Validates cryptographic implementations against a comprehensive library of known attack vectors and edge cases.

Retell AI Performance & Scaling

Optimizes Retell AI integrations through automated load testing, Kubernetes auto-scaling configurations, and data-driven capacity planning.

TLS Certificate Transparency Analysis

Monitors and analyzes Certificate Transparency logs to detect phishing attempts, unauthorized SSL/TLS issuances, and potential brand impersonation.

Granola Data Compliance & Export

Automates data export, retention policies, and GDPR/CCPA compliance for Granola meeting transcripts and notes.

EvilGinx3 Initial Access Guide

Facilitates authorized initial access testing using the EvilGinx3 adversary-in-the-middle framework to bypass multi-factor authentication.

Email Security (SPF, DKIM, DMARC) Implementation

Secures organizational email domains by configuring SPF, DKIM, and DMARC protocols to prevent spoofing and phishing.

Fuzzing Harness Writing

Generates high-quality fuzzing harnesses to identify edge-case bugs and security vulnerabilities across multiple programming languages.

Agent Tesla RAT Config Extractor

Extract embedded configurations and exfiltration credentials from Agent Tesla RAT samples using .NET decompilation and automated string analysis.

Splunk Lateral Movement Detection

Identifies and tracks adversary movement across network environments using specialized Splunk SPL queries and Windows event analysis.

Cybersecurity Deception Technology Deployment

Deploys honeypots, honeytokens, and decoy systems to provide high-fidelity detection of lateral movement and credential abuse.

Replit Policy Guardrails

Implements security guardrails and resource policy enforcement for applications hosted on Replit to prevent data leaks and resource overages.

Ransomware Encryption Analysis

Analyzes ransomware cryptographic routines to identify encryption algorithms, evaluate implementation weaknesses, and assess decryption feasibility for data recovery.

Zeek C2 Beaconing Detection

Detects command-and-control beaconing patterns by performing statistical analysis on Zeek network connection logs.

Forced Browsing & Auth Bypass

Identifies unprotected web pages and administrative interfaces to test authentication enforcement during authorized security audits.

Windows LNK Forensics Analyzer

Extracts and analyzes Windows LNK shortcut files to reconstruct file access history, identify external media usage, and build forensic timelines.