Security & Testing Agent Skills

Hookify Rule Architect

Standardizes and enforces coding practices by creating custom Hookify rules for Claude's development environment.

Compliance Manager Guardian

Enforces strict regulatory guardrails for PCI, GDPR, PSD2, and HIPAA compliance during core security file modifications.

Secure PR Workflow

Automates the end-to-end process of security auditing, pull request creation, and CI/CD monitoring using Claude Code.

AI Security & Pentesting Toolkit

Conducts automated security audits and penetration tests using AI-driven discovery, vulnerability scanning, and structured analysis.

Comprehensive Code Review

Performs a rigorous 7-point code audit covering security, performance, and maintainability to ensure production-grade software quality.

Forensic Analyst

Conducts comprehensive digital forensics investigations, reconstructs attack timelines, and analyzes system artifacts using LimaCharlie's security operations capabilities.

Verification Before Completion

Enforces rigorous verification protocols and evidence-based reporting before any task is marked as complete or successful.

TDD Red Phase Test Generator

Generates comprehensive failing tests to define expected software behavior and edge cases during the initial TDD phase.

TDD Red Phase Test Generator

Generates comprehensive failing tests to define behavior and edge cases during the initial Red phase of Test-Driven Development.

WCAG Accessibility Audit Patterns

Conducts comprehensive WCAG 2.2 accessibility audits with automated testing, manual verification, and actionable remediation strategies.

WCAG Accessibility Audit Patterns

Conducts comprehensive WCAG 2.2 accessibility audits using automated scans, manual verification protocols, and detailed remediation strategies.

Codex CLI Bridge

Delegates codebase research and deep code reviews to the OpenAI Codex CLI for high-performance parallel processing.

Verification Before Completion

Enforces a strict evidence-based workflow that requires fresh command output before any task can be claimed as complete.

Security Scanner

Scans code for critical security vulnerabilities and generates structured remediation reports with actionable fixes.

Entry Point Analyzer

Identifies and categorizes all state-changing entry points in smart contract codebases to streamline security audits and map attack surfaces.

Splunk Security & RBAC Management

Automates Splunk security operations including JWT token management, role-based access control verification, and ACL configuration.

.NET Unit Test Generator

Generates comprehensive, production-ready .NET unit tests using NUnit, FakeItEasy, and FakeXrmEasy for standard C# projects and Dataverse plugins.

Python Testing Patterns

Implements comprehensive Python testing strategies using pytest, fixtures, mocking, and test-driven development best practices.

Systematic Debugger

Executes a rigorous, scientific debugging workflow to reproduce, isolate, fix, and verify software bugs automatically.

Noir ACIR Optimization Loop

Measures and reduces the ACIR circuit size and gate count of Noir zero-knowledge programs through a structured, iterative optimization workflow.

Noir Circuit Reviewer

Analyzes Noir zero-knowledge circuits to detect security vulnerabilities, optimize constraint efficiency, and ensure proof soundness.

Harmonic Insight Licensing

Implements standardized licensing systems, plan management, and activation workflows across multiple programming platforms.

Noir JS Integration

Integrates Noir zero-knowledge circuits into JavaScript and TypeScript applications for proof generation and verification.

Noir Web Integration

Integrates Noir zero-knowledge circuits into web applications using React, Web Workers, and WASM for non-blocking client-side proving.

Noir Circuit Testing

Automates the testing and verification of Noir zero-knowledge circuits using the nargo framework.

Noir ZK Circuit Developer

Streamlines the development of zero-knowledge circuits using the Noir programming language and Nargo ecosystem.

OpenSpec Change Verifier

Validates that code implementations align with specifications, tasks, and design documents before archiving changes.

Strict Verification Before Completion

Enforces a mandatory evidence-based protocol requiring fresh command output before any coding task can be claimed as complete or fixed.

QA Setup & Standardization

Standardizes quality assurance commands across polyglot projects using runners like Just, npm, or uv.

Pre-Commit QA

Runs comprehensive quality assurance checks and linting before committing code changes to ensure production readiness.