skills.rest
takemi-ohama
takemi-ohamaCOMMUNITY
Explore all skills by this author →
GitHub

qa-security-scan

Automate OWASP Top 10 security scans with checklists and Codex CLI MCP.

1|Updated Nov 11, 2025
Search Tags:#automation#authorization#OWASP#security#authentication#vulnerability
One-click install
npx skills add https://github.com/takemi-ohama/ai-agent-marketplace --skill qa-security-scan
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: qa-security-scan
Source: https://github.com/takemi-ohama/ai-agent-marketplace/tree/main/plugins/ndf/skills/qa-security-scan
Command: npx skills add https://github.com/takemi-ohama/ai-agent-marketplace --skill qa-security-scan

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill provides security testing templates and checklists to help teams perform thorough security assessments aligned with OWASP Top 10, authentication/authorization testing, and data protection verification. It also enables structured security reporting and automated scanning integrations.

Core Features & Use Cases

  • OWASP Top 10 checklists with remediation guidance for systematic vulnerability identification
  • Authentication and authorization testing workflows to validate access controls
  • Data protection verification to ensure proper handling of sensitive information
  • Security report generation to produce consistent, actionable findings
  • Codex CLI MCP integration for automated security scanning

Quick Start

Trigger the security skill using prompts like "security scan" or "OWASP" for your project and request a security report.

Frequently Asked Questions about qa-security-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate security testing against OWASP Top 10 vulnerabilities?▼

OWASP Top 10 automation uses structured checklists to systematically identify and remediate the most critical web application security risks. This Skill provides pre-built checklists aligned with OWASP standards, enabling teams to run comprehensive vulnerability assessments without manual framework setup, then generate actionable security reports.

Can I integrate automated security scanning into my CI/CD pipeline?▼

Yes. This Skill integrates with Codex CLI MCP for automated scanning, allowing you to trigger security checks via command-line automation. Configure prompts like 'security scan' or 'OWASP' to run vulnerability assessments and data protection verification as part of your deployment workflow.

What authentication and authorization tests should I run before production?▼

Authentication and authorization testing validates access controls by verifying login mechanisms, permission boundaries, and role-based restrictions. This Skill provides structured testing workflows to confirm users can only access resources they're permitted to use, reducing the risk of unauthorized data exposure.

How do I create a security report from vulnerability findings?▼

Security report generation transforms raw vulnerability data into consistent, actionable findings. This Skill includes a report template that structures scan results with remediation guidance, enabling you to communicate security risks and mitigation steps clearly to stakeholders.

Do I need specialized tools to verify data protection compliance?▼

Data protection verification ensures sensitive information is handled correctly across your application. This Skill includes modular checklists for data protection that complement OWASP and authentication testing, so you can validate compliance without piecing together separate tools.

Related Skills

Explore More Software Engineering Skills→
ivegamsftivegamsft

security

Automate security audits, threat modeling, and vulnerability assessments for code.

Community
Advanced
jaskaranhundaljaskaranhundal
3

findings-tracker

Manage security finding lifecycles with risk scores and SLA enforcement.

Community
Advanced
jayjpatel9717jayjpatel9717

network-services

Scan network services and protocols for vulnerabilities and attack patterns.

Community
Advanced
j0KZj0KZ

security-scanner

Scan JavaScript/TypeScript codebases for OWASP Top 10 risks and secrets.

Community
Advanced