Security & Testing Agent Skills

Dependency Auditor

Scans and remediates security vulnerabilities across multiple package managers to secure your project's software supply chain.

Test Coverage Analyzer

Analyzes test coverage reports to identify testing gaps and provides prioritized recommendations for improving software quality.

Docker Image Security Scanner

Identifies and remediates vulnerabilities, outdated packages, and security misconfigurations in Docker images.

AWS Security Group Analyzer

Audits AWS security groups to identify overly permissive rules and improve network security posture.

Test Data Generator

Generates high-quality test fixtures, mock data, and complex test scenarios to streamline unit and integration testing across multiple languages.

Binary Analysis

Analyzes binary files to identify malicious behavior, perform decompilation, and generate detailed threat assessment reports.

SSL/TLS Configuration Helper

Configures secure SSL/TLS certificates and implements web security hardening patterns for Nginx servers.

API Security Checker

Audits backend APIs to identify and remediate OWASP Top 10 vulnerabilities, authentication flaws, and authorization issues.

Claude Code Testing Guide (zh-TW)

Standardizes software testing strategies and naming conventions using industry-recognized frameworks like ISTQB and the Testing Pyramid.

Project-Conformant Unit Testing

Ensures new unit tests strictly adhere to your project's established testing patterns, structures, and coding styles.

Rails Systematic Debugging

Debugs Ruby on Rails applications using a systematic four-phase framework and integrated diagnostic tools.

Rails Testing with Minitest

Implements rigorous Test-Driven Development (TDD) using Minitest and Rails-native patterns to ensure high-quality, maintainable codebases.

LLM Evaluation & Testing

Implements systematic evaluation patterns and metrics to measure LLM performance, validate prompt quality, and detect hallucinations.

Fix Validation Protocol

Enforces a scientific four-step workflow to verify code changes through observed behavior rather than the mere absence of errors.

Python Test Auditor

Performs comprehensive audits of Python test suites to ensure high coverage, proper isolation, and adherence to industry best practices.

Python Bug Investigator

Debugs and investigates functional Python issues using systematic root cause analysis and evidence-based testing frameworks.

Zigbee Unified Test Harness (ZUTH)

Streamlines the setup, configuration, and execution of Zigbee Unified Test Harness (ZUTH) for official Zigbee 3.0 certification testing.

Python Test Architecture & Strategy

Designs robust pytest architectures and comprehensive testing strategies for modern Python 3.11+ applications.

Perl Testing Guide

Streamlines Perl software quality assurance using Test::More, advanced mocking techniques, and automated test harnesses.

Perl Script Validator

Validates Perl scripts for syntax accuracy, security vulnerabilities, and adherence to industry best practices.

Bash Linting & Formatting

Ensures Bash script quality and consistency using ShellCheck static analysis and shfmt automated formatting.

Bash Testing

Streamlines shell script validation by providing standardized patterns and frameworks for unit testing and behavior-driven development.

Spec-Driven Implementation Phase

Executes development tasks through a rigorous Test-Driven Development (TDD) workflow featuring automated quality gates and anti-duplication checks.

Dependency Conflict Resolver

Resolves package manager dependency conflicts and security vulnerabilities across multiple languages before installation occurs.

Embedded C Standards & Zigbee Patterns

Provides expert guidance on MISRA-C compliance, FreeRTOS task management, and Zigbee 3.0 cluster implementation for nRF52 and STM32 platforms.

Systematic Debugging Patterns

Enforces a rigorous, evidence-based debugging workflow to identify root causes before implementing code fixes.

Rails Security Expert

Protects Ruby on Rails applications from critical vulnerabilities like XSS, SQL injection, and CSRF using industry-standard security patterns.

TDD Cycle & Test-Driven Development

Enforces a strict Red-Green-Refactor cycle to ensure every line of production code is verified by a prior failing test.

Strict Verification Gate

Enforces rigorous evidence-based verification before allowing completion claims to ensure code integrity and reliability.

Frontend Testing & Quality

Implements high-confidence testing strategies for web applications and games to eliminate flakiness and ensure production reliability.