role-aqa:security-testing

Your response is missing. Please try again.

14|3|Updated Feb 22, 2026

Search Tags:#testing #security #vulnerability #DAST #SAST #dependency scanning #OWASP ZAP

Ready to run

npx skills add https://github.com/rnavarych/alpha-engineer --skill role-aqa-security-testing

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: role-aqa:security-testing
Source: https://github.com/rnavarych/alpha-engineer/tree/main/plugins/roles/role-aqa/skills/security-testing
Command: npx skills add https://github.com/rnavarych/alpha-engineer --skill role-aqa-security-testing

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill addresses the critical need to identify and mitigate security vulnerabilities within applications and their dependencies, ensuring a robust security posture.

Core Features & Use Cases

Vulnerability Scanning: Automates SAST, DAST, and dependency scanning to detect known and potential security flaws.
Security Testing Strategy: Provides guidance on implementing various security testing types and integrating tools like OWASP ZAP and SonarQube.
Use Case: Before deploying a new feature, use this Skill to run a baseline scan with OWASP ZAP and check for critical vulnerabilities in your project's dependencies to prevent security breaches.

Quick Start

Use the security-testing skill to perform a baseline scan against the staging environment at https://staging.example.com.

Frequently Asked Questions about role-aqa:security-testing

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I automate security testing for applications in my CI/CD pipeline?▼

Automate security testing in CI/CD pipelines by integrating SAST, DAST, and dependency scanning tools like OWASP ZAP and SonarQube. This Skill orchestrates these tools to identify vulnerabilities, ensuring a robust security posture before deployment.

What is the difference between SAST and DAST vulnerability scanning?▼

SAST analyzes source code for flaws, while DAST tests running applications. This Skill automates both SAST and DAST using tools like SonarQube and OWASP ZAP, providing comprehensive coverage to detect known and potential security vulnerabilities.

Can I use OWASP ZAP to run a baseline scan against a staging environment?▼

Yes, you can use OWASP ZAP to run baseline scans against staging environments. This Skill automates baseline scanning with OWASP ZAP to identify critical vulnerabilities and check project dependencies before deploying new features.

How do I check for vulnerabilities in project dependencies?▼

Check project dependencies for vulnerabilities using automated dependency scanning tools like Snyk and Trivy. This Skill orchestrates dependency scanning to detect known security flaws and mitigate risks within your application's libraries.

Does this security testing approach include penetration test planning?▼

Yes, this approach includes penetration test planning alongside SAST, DAST, and dependency scanning. It provides guidance on implementing various security testing types and integrates with threat modeling processes to manage vulnerabilities effectively.

How do I integrate SonarQube and Trivy for application vulnerability scanning?▼

Integrate SonarQube and Trivy for vulnerability scanning by using this Skill to automate their execution. It combines SAST, DAST, and dependency scanning to detect security flaws and integrates with threat modeling processes.