sethdford/claude-skills - Página 7

defect-prevention

Expert approach to defect-prevention in quality measurement. Use when working with .

Idioma del texto original: inglés

escaped-defect-analysis

Expert approach to escaped-defect-analysis in quality measurement. Use when working with .

Idioma del texto original: inglés

quality-dashboard

Expert approach to quality-dashboard in quality measurement. Use when working with .

Idioma del texto original: inglés

quality-gate-design

Expert approach to quality-gate-design in quality measurement. Use when working with .

Idioma del texto original: inglés

root-cause-analysis-qa

Expert approach to root-cause-analysis-qa in quality measurement. Use when working with .

Idioma del texto original: inglés

test-effectiveness-measurement

Expert approach to test-effectiveness-measurement in quality measurement. Use when working with .

Idioma del texto original: inglés

test-metrics-framework

Expert approach to test-metrics-framework in quality measurement. Use when working with .

Idioma del texto original: inglés

regression-strategy

Develop regression test strategies and maintenance approaches. Use when managing regression risk across releases.

Idioma del texto original: inglés

risk-based-test-plan

Prioritize test efforts based on risk assessment. Use when allocating limited testing resources to maximize defect detection.

Idioma del texto original: inglés

shift-left-strategy

Design shift-left testing strategies to catch defects early. Use when planning early involvement of QA in development.

Idioma del texto original: inglés

test-coverage-analysis

Measure and analyze test coverage gaps. Use when identifying untested code paths and assessing coverage sufficiency.

Idioma del texto original: inglés

test-data-strategy

Design test data management approaches. Use when planning data provisioning for testing.

Idioma del texto original: inglés

test-environment-plan

Plan and design test environment strategies. Use when setting up testing infrastructure and environment requirements.

Idioma del texto original: inglés

test-estimation

Estimate testing effort and resource requirements. Use when planning test cycles and allocating QA resources.

Idioma del texto original: inglés

test-pyramid-design

Design test pyramid architecture balancing unit, integration, and E2E tests. Use when establishing test level distribution and automation strategy.

Idioma del texto original: inglés

test-strategy-design

Design comprehensive test strategies aligned with project goals, risks, and constraints. Use when planning testing efforts for new projects or major releases.

Idioma del texto original: inglés

api-security-review

Review API security including authentication, authorization, rate limiting, input validation, and data exposure.

Idioma del texto original: inglés

content-security-policy

Design and deploy Content-Security-Policy (CSP) to prevent XSS attacks and unauthorized resource loading.

Idioma del texto original: inglés

dast-test-plan

Design and execute Dynamic Application Security Testing (DAST) test plans to find runtime vulnerabilities in web applications.

Idioma del texto original: inglés

dependency-vulnerability-scan

Scan application dependencies for known vulnerabilities and manage security updates across supply chain.

Idioma del texto original: inglés

penetration-test-scope

Define penetration test scope, objectives, and constraints to align testing with business goals and compliance requirements.

Idioma del texto original: inglés

sast-configuration

Configure and deploy Static Application Security Testing (SAST) tools to find vulnerabilities in source code during development.

Idioma del texto original: inglés

security-test-plan

Develop comprehensive security test plans covering functional security, vulnerability scanning, and attack scenarios.

Idioma del texto original: inglés

web-security-headers

Configure security HTTP headers to mitigate XSS, clickjacking, MIME sniffing, and other browser-based attacks.

Idioma del texto original: inglés

audit-preparation

Prepare for compliance audits by collecting evidence, organizing documentation, and coordinating with auditors.

Idioma del texto original: inglés

compliance-mapping

Map security controls to compliance framework requirements (NIST, CIS, ISO 27001, PCI-DSS, HIPAA, GDPR, SOC 2).

Idioma del texto original: inglés

data-classification

Classify organizational data by sensitivity level and define handling, storage, and access requirements.

Idioma del texto original: inglés

gdpr-assessment

Assess GDPR compliance for data processing, rights, privacy controls, and incident response obligations.

Idioma del texto original: inglés

pci-dss-review

Review PCI-DSS compliance for payment card data security across network, systems, and processes.

Idioma del texto original: inglés

privacy-impact-assessment

Conduct Privacy Impact Assessments (PIA) to evaluate privacy risks and compliance for data processing activities.

Idioma del texto original: inglés

security-policy-template

Develop organization-wide security policies covering access control, data handling, incident response, and vendor management.

Idioma del texto original: inglés

soc2-controls

Implement SOC 2 Trust Services Criteria controls for security, availability, processing integrity, confidentiality, and privacy.

Idioma del texto original: inglés

containment-strategy

Develop containment strategies to isolate compromised systems, prevent lateral movement, and stop ongoing attacks.

Idioma del texto original: inglés

evidence-preservation

Preserve evidence during incident response to enable forensic analysis and maintain legal admissibility.

Idioma del texto original: inglés

forensic-analysis-guide

Conduct forensic analysis to determine attack vectors, scope of compromise, and evidence for legal proceedings.

Idioma del texto original: inglés

incident-communication

Develop incident communication strategies for internal teams, customers, regulators, and media during and after security incidents.

Idioma del texto original: inglés

incident-response-plan

Develop comprehensive incident response plans with clear roles, procedures, communication protocols, and recovery workflows. Use when establishing IR processes, conducting tabletops, or updating response procedures after incidents.

Idioma del texto original: inglés

lessons-learned

Conduct post-incident reviews to document lessons learned and implement process improvements preventing recurrence.

Idioma del texto original: inglés

recovery-procedures

Establish recovery procedures to restore systems, verify integrity, and validate business continuity after incidents.

Idioma del texto original: inglés

root-cause-analysis-security

Conduct root-cause analysis (RCA) to identify underlying causes of security incidents and prevent recurrence.

Idioma del texto original: inglés