Explore Skills

Implement JUnit 5, Mockito, and AssertJ patterns with 80%+ code coverage for CIA platform unit tests

secure-code-review

Conduct comprehensive security code reviews using OWASP Top 10, SAST/DAST patterns, and Hack23 ISMS secure development policy

security-documentation

Maintain comprehensive security documentation including SECURITY_ARCHITECTURE.md, THREAT_MODEL.md per Hack23 ISMS standards

threat-modeling

Conduct systematic threat modeling using STRIDE framework, attack trees, and security architecture analysis for CIA platform

vaadin-component-design

Design Vaadin UI components with proper lifecycle, data binding, and responsive layouts for CIA platform

iso-27001-controls

Verify implementation of ISO 27001:2022 information security controls across CIA platform development and operations

193 days ago

cis-controls

Implement CIS Controls v8 critical security controls for effective cyber defense in CIA platform

gdpr-compliance

Ensure GDPR compliance for personal data processing in CIA platform with privacy-by-design principles

secrets-management

Never commit secrets, manage credentials securely using environment variables, vaults, and Hack23 ISMS key management policy

code-quality-checks

Enforce code quality with SonarCloud, CheckStyle, SpotBugs, and maintain quality gates

input-validation

Implement comprehensive input validation to prevent XSS, SQL injection, and command injection attacks with sanitization strategies

integration-testing

Implement Spring Framework integration tests with TestContainers, Spring Test, and database fixtures

e2e-testing

Implement end-to-end testing with Selenium, Playwright for CIA platform UI and workflow validation

crypto-best-practices

Implement strong encryption, secure hashing, and proper key management following NIST and OWASP cryptography guidelines

testing-strategy

Comprehensive testing with Vitest, Cypress, and React Testing Library targeting 80%+ coverage with Three.js component testing

ISMS Compliance

ISMS policy alignment and compliance verification for Hack23 AB security standards (ISO 27001, NIST CSF 2.0, CIS Controls v8.1)

react-threejs-game

Three.js game development with React using @react-three/fiber and @react-three/drei with strict TypeScript and 60fps performance

performance-optimization

React re-render optimization, Three.js rendering performance, useMemo/useCallback patterns, bundle size reduction, and 60fps profiling

security-by-design

High-level security principles and enforcement rules for building secure applications from the ground up with defense-in-depth

iso-27001

ISO 27001:2022 requirements, control implementation, documentation requirements, and audit preparation

isms-compliance-checking

Validates all code changes against Hack23 ISMS policies, enforces ISO 27001:2022, NIST CSF 2.0, CIS Controls v8.1 alignment, ensures GDPR/NIS2/EU CRA compliance, supply chain security (OSSF Scorecard, SLSA, SBOM), and maintains required architecture documentation for Black Trigram.

access-control

Least privilege principle, RBAC, authentication, authorization, and session management following Hack23 Access Control Policy

security-architecture-validation

Validates that all code changes follow Hack23 ISMS security architecture principles, ensures SECURITY_ARCHITECTURE.md and FUTURE_SECURITY_ARCHITECTURE.md are maintained, and enforces security-by-design practices across the codebase.

secure-development

Security-by-design principles for developing secure applications following Hack23 ISMS Secure Development Policy

data-classification

Data classification levels (Public, Internal, Confidential, Restricted) and handling requirements per Hack23 Data Classification Policy

korean-theming-standards

Enforces Korean cyberpunk aesthetic and cultural authenticity for Black Trigram. Ensures proper Korean color palette usage, bilingual text, authentic martial arts terminology, and Eight Trigram system integration across all UI and game components.