sethdford/claude-skills - Page 7

defect-prevention

Expert approach to defect-prevention in quality measurement. Use when working with .

escaped-defect-analysis

Expert approach to escaped-defect-analysis in quality measurement. Use when working with .

quality-dashboard

Expert approach to quality-dashboard in quality measurement. Use when working with .

quality-gate-design

Expert approach to quality-gate-design in quality measurement. Use when working with .

root-cause-analysis-qa

Expert approach to root-cause-analysis-qa in quality measurement. Use when working with .

test-effectiveness-measurement

Expert approach to test-effectiveness-measurement in quality measurement. Use when working with .

test-metrics-framework

Expert approach to test-metrics-framework in quality measurement. Use when working with .

regression-strategy

Develop regression test strategies and maintenance approaches. Use when managing regression risk across releases.

risk-based-test-plan

Prioritize test efforts based on risk assessment. Use when allocating limited testing resources to maximize defect detection.

shift-left-strategy

Design shift-left testing strategies to catch defects early. Use when planning early involvement of QA in development.

test-coverage-analysis

Measure and analyze test coverage gaps. Use when identifying untested code paths and assessing coverage sufficiency.

test-data-strategy

Design test data management approaches. Use when planning data provisioning for testing.

test-environment-plan

Plan and design test environment strategies. Use when setting up testing infrastructure and environment requirements.

test-estimation

Estimate testing effort and resource requirements. Use when planning test cycles and allocating QA resources.

test-pyramid-design

Design test pyramid architecture balancing unit, integration, and E2E tests. Use when establishing test level distribution and automation strategy.

test-strategy-design

Design comprehensive test strategies aligned with project goals, risks, and constraints. Use when planning testing efforts for new projects or major releases.

api-security-review

Review API security including authentication, authorization, rate limiting, input validation, and data exposure.

content-security-policy

Design and deploy Content-Security-Policy (CSP) to prevent XSS attacks and unauthorized resource loading.

dast-test-plan

Design and execute Dynamic Application Security Testing (DAST) test plans to find runtime vulnerabilities in web applications.

dependency-vulnerability-scan

Scan application dependencies for known vulnerabilities and manage security updates across supply chain.

penetration-test-scope

Define penetration test scope, objectives, and constraints to align testing with business goals and compliance requirements.

sast-configuration

Configure and deploy Static Application Security Testing (SAST) tools to find vulnerabilities in source code during development.

security-test-plan

Develop comprehensive security test plans covering functional security, vulnerability scanning, and attack scenarios.

web-security-headers

Configure security HTTP headers to mitigate XSS, clickjacking, MIME sniffing, and other browser-based attacks.

audit-preparation

Prepare for compliance audits by collecting evidence, organizing documentation, and coordinating with auditors.

compliance-mapping

Map security controls to compliance framework requirements (NIST, CIS, ISO 27001, PCI-DSS, HIPAA, GDPR, SOC 2).

data-classification

Classify organizational data by sensitivity level and define handling, storage, and access requirements.

gdpr-assessment

Assess GDPR compliance for data processing, rights, privacy controls, and incident response obligations.

pci-dss-review

Review PCI-DSS compliance for payment card data security across network, systems, and processes.

privacy-impact-assessment

Conduct Privacy Impact Assessments (PIA) to evaluate privacy risks and compliance for data processing activities.

security-policy-template

Develop organization-wide security policies covering access control, data handling, incident response, and vendor management.

soc2-controls

Implement SOC 2 Trust Services Criteria controls for security, availability, processing integrity, confidentiality, and privacy.

containment-strategy

Develop containment strategies to isolate compromised systems, prevent lateral movement, and stop ongoing attacks.

evidence-preservation

Preserve evidence during incident response to enable forensic analysis and maintain legal admissibility.

forensic-analysis-guide

Conduct forensic analysis to determine attack vectors, scope of compromise, and evidence for legal proceedings.

incident-communication

Develop incident communication strategies for internal teams, customers, regulators, and media during and after security incidents.

incident-response-plan

Develop comprehensive incident response plans with clear roles, procedures, communication protocols, and recovery workflows. Use when establishing IR processes, conducting tabletops, or updating response procedures after incidents.

lessons-learned

Conduct post-incident reviews to document lessons learned and implement process improvements preventing recurrence.

recovery-procedures

Establish recovery procedures to restore systems, verify integrity, and validate business continuity after incidents.

root-cause-analysis-security

Conduct root-cause analysis (RCA) to identify underlying causes of security incidents and prevent recurrence.