sethdford/claude-skills - Page 7

defect-prevention

Expert approach to defect-prevention in quality measurement. Use when working with .

Langue du texte source : anglais

escaped-defect-analysis

Expert approach to escaped-defect-analysis in quality measurement. Use when working with .

Langue du texte source : anglais

quality-dashboard

Expert approach to quality-dashboard in quality measurement. Use when working with .

Langue du texte source : anglais

quality-gate-design

Expert approach to quality-gate-design in quality measurement. Use when working with .

Langue du texte source : anglais

root-cause-analysis-qa

Expert approach to root-cause-analysis-qa in quality measurement. Use when working with .

Langue du texte source : anglais

test-effectiveness-measurement

Expert approach to test-effectiveness-measurement in quality measurement. Use when working with .

Langue du texte source : anglais

test-metrics-framework

Expert approach to test-metrics-framework in quality measurement. Use when working with .

Langue du texte source : anglais

regression-strategy

Develop regression test strategies and maintenance approaches. Use when managing regression risk across releases.

Langue du texte source : anglais

risk-based-test-plan

Prioritize test efforts based on risk assessment. Use when allocating limited testing resources to maximize defect detection.

Langue du texte source : anglais

shift-left-strategy

Design shift-left testing strategies to catch defects early. Use when planning early involvement of QA in development.

Langue du texte source : anglais

test-coverage-analysis

Measure and analyze test coverage gaps. Use when identifying untested code paths and assessing coverage sufficiency.

Langue du texte source : anglais

test-data-strategy

Design test data management approaches. Use when planning data provisioning for testing.

Langue du texte source : anglais

test-environment-plan

Plan and design test environment strategies. Use when setting up testing infrastructure and environment requirements.

Langue du texte source : anglais

test-estimation

Estimate testing effort and resource requirements. Use when planning test cycles and allocating QA resources.

Langue du texte source : anglais

test-pyramid-design

Design test pyramid architecture balancing unit, integration, and E2E tests. Use when establishing test level distribution and automation strategy.

Langue du texte source : anglais

test-strategy-design

Design comprehensive test strategies aligned with project goals, risks, and constraints. Use when planning testing efforts for new projects or major releases.

Langue du texte source : anglais

api-security-review

Review API security including authentication, authorization, rate limiting, input validation, and data exposure.

Langue du texte source : anglais

content-security-policy

Design and deploy Content-Security-Policy (CSP) to prevent XSS attacks and unauthorized resource loading.

Langue du texte source : anglais

dast-test-plan

Design and execute Dynamic Application Security Testing (DAST) test plans to find runtime vulnerabilities in web applications.

Langue du texte source : anglais

dependency-vulnerability-scan

Scan application dependencies for known vulnerabilities and manage security updates across supply chain.

Langue du texte source : anglais

penetration-test-scope

Define penetration test scope, objectives, and constraints to align testing with business goals and compliance requirements.

Langue du texte source : anglais

sast-configuration

Configure and deploy Static Application Security Testing (SAST) tools to find vulnerabilities in source code during development.

Langue du texte source : anglais

security-test-plan

Develop comprehensive security test plans covering functional security, vulnerability scanning, and attack scenarios.

Langue du texte source : anglais

web-security-headers

Configure security HTTP headers to mitigate XSS, clickjacking, MIME sniffing, and other browser-based attacks.

Langue du texte source : anglais

audit-preparation

Prepare for compliance audits by collecting evidence, organizing documentation, and coordinating with auditors.

Langue du texte source : anglais

compliance-mapping

Map security controls to compliance framework requirements (NIST, CIS, ISO 27001, PCI-DSS, HIPAA, GDPR, SOC 2).

Langue du texte source : anglais

data-classification

Classify organizational data by sensitivity level and define handling, storage, and access requirements.

Langue du texte source : anglais

gdpr-assessment

Assess GDPR compliance for data processing, rights, privacy controls, and incident response obligations.

Langue du texte source : anglais

pci-dss-review

Review PCI-DSS compliance for payment card data security across network, systems, and processes.

Langue du texte source : anglais

privacy-impact-assessment

Conduct Privacy Impact Assessments (PIA) to evaluate privacy risks and compliance for data processing activities.

Langue du texte source : anglais

security-policy-template

Develop organization-wide security policies covering access control, data handling, incident response, and vendor management.

Langue du texte source : anglais

soc2-controls

Implement SOC 2 Trust Services Criteria controls for security, availability, processing integrity, confidentiality, and privacy.

Langue du texte source : anglais

containment-strategy

Develop containment strategies to isolate compromised systems, prevent lateral movement, and stop ongoing attacks.

Langue du texte source : anglais

evidence-preservation

Preserve evidence during incident response to enable forensic analysis and maintain legal admissibility.

Langue du texte source : anglais

forensic-analysis-guide

Conduct forensic analysis to determine attack vectors, scope of compromise, and evidence for legal proceedings.

Langue du texte source : anglais

incident-communication

Develop incident communication strategies for internal teams, customers, regulators, and media during and after security incidents.

Langue du texte source : anglais

incident-response-plan

Develop comprehensive incident response plans with clear roles, procedures, communication protocols, and recovery workflows. Use when establishing IR processes, conducting tabletops, or updating response procedures after incidents.

Langue du texte source : anglais

lessons-learned

Conduct post-incident reviews to document lessons learned and implement process improvements preventing recurrence.

Langue du texte source : anglais

recovery-procedures

Establish recovery procedures to restore systems, verify integrity, and validate business continuity after incidents.

Langue du texte source : anglais

root-cause-analysis-security

Conduct root-cause analysis (RCA) to identify underlying causes of security incidents and prevent recurrence.

Langue du texte source : anglais