sethdford/claude-skills - Seite 7

defect-prevention

Expert approach to defect-prevention in quality measurement. Use when working with .

Quellsprache: Englisch

escaped-defect-analysis

Expert approach to escaped-defect-analysis in quality measurement. Use when working with .

Quellsprache: Englisch

quality-dashboard

Expert approach to quality-dashboard in quality measurement. Use when working with .

Quellsprache: Englisch

quality-gate-design

Expert approach to quality-gate-design in quality measurement. Use when working with .

Quellsprache: Englisch

root-cause-analysis-qa

Expert approach to root-cause-analysis-qa in quality measurement. Use when working with .

Quellsprache: Englisch

test-effectiveness-measurement

Expert approach to test-effectiveness-measurement in quality measurement. Use when working with .

Quellsprache: Englisch

test-metrics-framework

Expert approach to test-metrics-framework in quality measurement. Use when working with .

Quellsprache: Englisch

regression-strategy

Develop regression test strategies and maintenance approaches. Use when managing regression risk across releases.

Quellsprache: Englisch

risk-based-test-plan

Prioritize test efforts based on risk assessment. Use when allocating limited testing resources to maximize defect detection.

Quellsprache: Englisch

shift-left-strategy

Design shift-left testing strategies to catch defects early. Use when planning early involvement of QA in development.

Quellsprache: Englisch

test-coverage-analysis

Measure and analyze test coverage gaps. Use when identifying untested code paths and assessing coverage sufficiency.

Quellsprache: Englisch

test-data-strategy

Design test data management approaches. Use when planning data provisioning for testing.

Quellsprache: Englisch

test-environment-plan

Plan and design test environment strategies. Use when setting up testing infrastructure and environment requirements.

Quellsprache: Englisch

test-estimation

Estimate testing effort and resource requirements. Use when planning test cycles and allocating QA resources.

Quellsprache: Englisch

test-pyramid-design

Design test pyramid architecture balancing unit, integration, and E2E tests. Use when establishing test level distribution and automation strategy.

Quellsprache: Englisch

test-strategy-design

Design comprehensive test strategies aligned with project goals, risks, and constraints. Use when planning testing efforts for new projects or major releases.

Quellsprache: Englisch

api-security-review

Review API security including authentication, authorization, rate limiting, input validation, and data exposure.

Quellsprache: Englisch

content-security-policy

Design and deploy Content-Security-Policy (CSP) to prevent XSS attacks and unauthorized resource loading.

Quellsprache: Englisch

dast-test-plan

Design and execute Dynamic Application Security Testing (DAST) test plans to find runtime vulnerabilities in web applications.

Quellsprache: Englisch

dependency-vulnerability-scan

Scan application dependencies for known vulnerabilities and manage security updates across supply chain.

Quellsprache: Englisch

penetration-test-scope

Define penetration test scope, objectives, and constraints to align testing with business goals and compliance requirements.

Quellsprache: Englisch

sast-configuration

Configure and deploy Static Application Security Testing (SAST) tools to find vulnerabilities in source code during development.

Quellsprache: Englisch

security-test-plan

Develop comprehensive security test plans covering functional security, vulnerability scanning, and attack scenarios.

Quellsprache: Englisch

web-security-headers

Configure security HTTP headers to mitigate XSS, clickjacking, MIME sniffing, and other browser-based attacks.

Quellsprache: Englisch

audit-preparation

Prepare for compliance audits by collecting evidence, organizing documentation, and coordinating with auditors.

Quellsprache: Englisch

compliance-mapping

Map security controls to compliance framework requirements (NIST, CIS, ISO 27001, PCI-DSS, HIPAA, GDPR, SOC 2).

Quellsprache: Englisch

data-classification

Classify organizational data by sensitivity level and define handling, storage, and access requirements.

Quellsprache: Englisch

gdpr-assessment

Assess GDPR compliance for data processing, rights, privacy controls, and incident response obligations.

Quellsprache: Englisch

pci-dss-review

Review PCI-DSS compliance for payment card data security across network, systems, and processes.

Quellsprache: Englisch

privacy-impact-assessment

Conduct Privacy Impact Assessments (PIA) to evaluate privacy risks and compliance for data processing activities.

Quellsprache: Englisch

security-policy-template

Develop organization-wide security policies covering access control, data handling, incident response, and vendor management.

Quellsprache: Englisch

soc2-controls

Implement SOC 2 Trust Services Criteria controls for security, availability, processing integrity, confidentiality, and privacy.

Quellsprache: Englisch

containment-strategy

Develop containment strategies to isolate compromised systems, prevent lateral movement, and stop ongoing attacks.

Quellsprache: Englisch

evidence-preservation

Preserve evidence during incident response to enable forensic analysis and maintain legal admissibility.

Quellsprache: Englisch

forensic-analysis-guide

Conduct forensic analysis to determine attack vectors, scope of compromise, and evidence for legal proceedings.

Quellsprache: Englisch

incident-communication

Develop incident communication strategies for internal teams, customers, regulators, and media during and after security incidents.

Quellsprache: Englisch

incident-response-plan

Develop comprehensive incident response plans with clear roles, procedures, communication protocols, and recovery workflows. Use when establishing IR processes, conducting tabletops, or updating response procedures after incidents.

Quellsprache: Englisch

lessons-learned

Conduct post-incident reviews to document lessons learned and implement process improvements preventing recurrence.

Quellsprache: Englisch

recovery-procedures

Establish recovery procedures to restore systems, verify integrity, and validate business continuity after incidents.

Quellsprache: Englisch

root-cause-analysis-security

Conduct root-cause analysis (RCA) to identify underlying causes of security incidents and prevent recurrence.

Quellsprache: Englisch