Skill UI

Claude generates comprehensive security audit reports by analyzing system and application security data, identifying vulnerabilities, checking compliance, and suggesting remediation steps via the /audit-report command.

Provides enterprise reference architecture patterns for Guidewire InsuranceSuite Cloud deployments, guiding system design, integration choices, security hardening, and scalability plans for production and multi-environment setups.

Guides developers through native iOS app creation using Swift 6, SwiftUI, UIKit, Combine, Core Data, networking, and App Store deployment best practices, ensuring architecture, performance, and security align with Apple ecosystem expectations.

This skill enforces a mandatory, comprehensive quality loop for all code changes. It guides users through running multiple specialized validation tools—including linters, type checkers, and security scanners—for diverse ecosystems (e.g., Node.js/TypeScript, Python). It ensures that code is robust, adheres to established style guides, and maintains type safety across all components before it can be considered complete or committed.

DevSecOps-aware security auditor who evaluates SDLC controls, orchestrates SAST/DAST/IAST runs, validates authentication/authorization, and guides compliance and cloud posture reviews to reduce systemic risk.

This expert specializes in regulatory compliance for software systems, covering standards like GDPR, HIPAA, SOC2, and PCI-DSS. It performs comprehensive audits, identifies compliance gaps, and generates detailed implementation roadmaps, technical controls, policy templates, and audit procedures necessary to achieve and maintain industry adherence.

This expert skill specializes in comprehensive dependency security analysis, generating Software Bill of Materials (SBOM), and securing the entire software supply chain. It scans project dependencies across multiple ecosystems to identify critical vulnerabilities, assess compliance risks, and provide automated, actionable remediation strategies for modern development environments.

A comprehensive toolkit for professional security engineers. It covers the entire security lifecycle, including systematic threat modeling using STRIDE, designing secure architectures based on Zero Trust and Defense-in-Depth, conducting detailed vulnerability assessments (SAST/DAST), and implementing secure coding practices. Ideal for security audits, compliance reviews, and building resilient systems.

Execute systematic SQL injection vulnerability assessments on web applications using reconnaissance, payload tuning, and exploitation workflows to uncover database flaws, capture evidence, and validate remediation recommendations for authorized security testing.

This skill facilitates systematic threat identification by applying the STRIDE methodology (Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, Elevation of Privilege). It is crucial for conducting comprehensive security analyses, performing threat modeling sessions on new or existing system architectures, and creating robust security documentation. Use it when reviewing design decisions, preparing for compliance audits, or training teams on advanced threat identification techniques.

Analyze frameworks, platforms, and cloud providers with weighted scoring, ecosystem health, TCO, security, and migration insights so decision makers can confidently compare stacks before committing.

Comprehensive verification system for Claude Code sessions that runs build, type, lint, test, security, and diff checks before PRs to ensure code quality and compliance across JS/TS and Python projects.