scanning-database-security

1.5k

Jeremylongshore Claude Code Plugins Plus Skills Database Security Scanner

This skill enables Claude to perform comprehensive database security scans using the database-security-scanner plugin. It is triggered when the user requests a security assessment of a database, including identifying vulnerabilities like weak passwords, SQL injection risks, and insecure configurations. The skill leverages OWASP guidelines to ensure thorough coverage and provides remediation suggestions. Use this skill when the user asks to 'scan database security', 'check database for vulnerabilities', 'perform OWASP compliance check on database', or 'assess database security posture'. The plugin supports PostgreSQL and MySQL.

crap-analysis

445

Aaronontheweb

Analyze code coverage and CRAP (Change Risk Anti-Patterns) scores to identify high-risk code. Use OpenCover format with ReportGenerator for Risk Hotspots showing cyclomatic complexity and untested code paths.

qe-risk-based-testing

215

proffesor-for-testing

Focus testing effort on highest-risk areas using risk assessment and prioritization. Use when planning test strategy, allocating testing resources, or making coverage decisions.

risk-based-testing

215

proffesor-for-testing

Focus testing effort on highest-risk areas using risk assessment and prioritization. Use when planning test strategy, allocating testing resources, or making coverage decisions.

QE Coverage Analysis

215

proffesor-for-testing

O(log n) sublinear coverage gap detection with risk-weighted analysis and intelligent test prioritization.

ln-632-test-e2e-priority-auditor

131

levnikolaevich

E2E Critical Coverage audit worker (L3). Validates E2E coverage for critical paths (Money 20+, Security 20+, Data 15+). Pure risk-based - no pyramid percentages.

Test Coverage Gap Finder

71

PramodDutta

Identify untested code paths, uncovered branches, and missing test scenarios using coverage analysis, risk mapping, and change-based coverage tracking

Test Plan Generation

71

PramodDutta

Test plan generation skill covering requirements analysis, test strategy, coverage matrices, risk-based testing, and test estimation techniques.

qa-testing-strategy

34

vasilyu1983

Risk-based quality engineering test strategy for software delivery. Use when defining or updating test strategy, selecting unit/integration/contract/E2E/performance/security coverage, setting CI quality gates and suite budgets, managing flaky tests and test data, and operationalizing observability-first debugging and release criteria.

sensor-coverage

6

refractionPOINT

Comprehensive Asset Inventory & Coverage Tracker for LimaCharlie. Builds sensor inventories, detects coverage gaps (stale/silent endpoints, Shadow IT), calculates risk scores, validates telemetry health, and compares actual vs expected assets. Use for fleet inventory, coverage SLA tracking, offline sensor detection, telemetry health checks, asset compliance audits, or when asked about endpoint health, asset management, or coverage gaps.

analysis-design

4

mway

Systematic analysis and reasoning workflows. Use when performing audits, investigation, requirements analysis, risk analysis, scenario/edge-case enumeration, or design analysis that demands evidence-based, comprehensive coverage.

testing-obsessive

3

JasonWarrenUK

This skill should be used when the user mentions "write tests", "test coverage", "testing strategy", "unit tests", "integration tests", "e2e tests", "vitest", "jest", discusses testing approaches, asks about test patterns, or works on test files. Addresses testing fundamentals with emphasis on Vitest and Svelte component testing using pragmatic, risk-based approaches.

implementing-threat-modeling-with-mitre-attack

2

mukul975

Implements threat modeling using the MITRE ATT&CK framework to map adversary TTPs against organizational assets, assess detection coverage gaps, and prioritize defensive investments. Use when SOC teams need to align detection engineering with threat landscape, conduct threat assessments for new environments, or justify security tool procurement.

diff-review

1

flitzrrr

Structured code review of git diffs or pull requests. Analyzes changes for impact, risk, documentation staleness, and test coverage gaps. Produces a review report that can guide both human reviewers and automated follow-up actions.

CRAP Analysis

1

wshaddix

Analyze code coverage and CRAP (Change Risk Anti-Patterns) scores to identify high-risk code. Use OpenCover-format coverage with ReportGenerator to produce Risk Hotspots that show cyclomatic complexity and untested code paths. Use this when evaluating code quality and test coverage before changes, when identifying high-risk code that needs refactoring or additional tests, when setting up coverage collection for a .NET project, or when establishing coverage thresholds for CI/CD pipelines.

Test Plan Generation

1

KaliBellion

Test plan generation skill covering requirements analysis, test strategy, coverage matrices, risk-based testing, and test estimation techniques.

analyze-impact

1

flitzrrr

Pre-implementation impact analysis for a plan phase. Analyzes dependencies, test coverage, breaking change risk, and affected modules before coding begins. Produces an impact report that prevents surprises during implementation.

dotnet-crap-analysis

RyoMurakami1983

Analyze code coverage and CRAP (Change Risk Anti-Patterns) scores to identify high-risk .NET code. Use when evaluating test coverage, setting up OpenCover with ReportGenerator, or enforcing coverage thresholds in CI/CD pipelines.

task-progress

uboy

Interactively produce a high-quality English progress comment for tracker tasks, with ArkUI/OpenHarmony risk coverage and optional mapping to structured task descriptions (expected outcome, scope, acceptance criteria).