skills.rest
AZANIR
AZANIRCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

qa-security-test-writer

Generate OWASP Top 10 and WSTG security tests with ZAP and custom scripts.

2|2|Updated Mar 7, 2026
Search Tags:#security testing#penetration testing#owasp top 10#vulnerability scanning#zap#dast
One-click install
npx skills add https://github.com/AZANIR/qa-skills --skill qa-security-test-writer
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: qa-security-test-writer
Source: https://github.com/AZANIR/qa-skills/tree/main/.cursor/skills/qa-security-test-writer
Command: npx skills add https://github.com/AZANIR/qa-skills --skill qa-security-test-writer

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill automates the generation of security tests to identify vulnerabilities in applications, aligning with the OWASP Top 10 and WSTG standards.

Core Features & Use Cases

  • Vulnerability Test Generation: Creates executable security test scripts (TypeScript/Python) for common vulnerabilities like SQL injection, XSS, and CSRF.
  • DAST Configuration: Sets up OWASP ZAP for dynamic application security testing.
  • Use Case: A developer needs to ensure their new API endpoint is protected against common web attacks. They can use this Skill to generate tests for SQL injection and XSS, and configure ZAP to perform a DAST scan on the staging environment.

Quick Start

Use the qa-security-test-writer skill to generate security tests for the login page.

Frequently Asked Questions about qa-security-test-writer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate security tests for OWASP Top 10 vulnerabilities?▼

You can automate security testing for OWASP Top 10 by generating executable scripts for injection, XSS, and CSRF, and configuring DAST tools like OWASP ZAP to scan staging environments.

How do I set up OWASP ZAP for dynamic application security testing?▼

Setting up OWASP ZAP for DAST involves generating specific configurations that target your application context, enabling automated dynamic scanning for common web vulnerabilities.

Can I generate custom vulnerability scanning scripts for authentication bypass and injection?▼

Yes, you can generate custom vulnerability scanning scripts in TypeScript or Python that specifically test for authentication bypass, SQL injection, and cross-site scripting attacks.

What is the best way to test API endpoints against common web attacks?▼

The best way to test API endpoints against web attacks is to generate executable security test scripts aligned with WSTG standards and perform DAST scans using OWASP ZAP.

Does this security testing approach support non-functional security requirements?▼

Yes, this approach supports non-functional security requirements by transforming application context and NFR specifications into executable security test scripts and tool configurations.

What languages are supported for generating executable security test scripts?▼

Executable security test scripts are generated in either TypeScript or Python, allowing integration into various development workflows for vulnerability and penetration testing.

Related Skills

Explore More Software Engineering Skills→
sheriaxsheriax

clerk-backend-api

Manage Clerk resources via the Backend REST API with OpenAPI validation.

Official
Intermediate
Jonathan0823Jonathan0823
7

security-best-practices

Review codebases against OWASP Top 10 security best practices.

Community
Basic
luokai25luokai25

devsecops-expert

Integrates security scans into CI/CD pipelines automating vulnerability detection.

Community
Advanced
dreadnodedreadnode
11

vuln-critic

Filter low-quality and false positive vulnerability findings from scanners and agent output.

Official
Intermediate