Plan and execute security testing for web apps and APIs.
npx skills add https://github.com/nntan90/qa-skill-suite --skill security-test
Please help me install this Agent Skill. Skill: security-test Source: https://github.com/nntan90/qa-skill-suite/tree/main/security-test Command: npx skills add https://github.com/nntan90/qa-skill-suite --skill security-test
Security testing for web apps and APIs is essential but often manual, error-prone, and time-consuming. This skill provides a structured approach to plan, execute, and document security assessments aligned with OWASP and ISTQB-inspired practices.
Define your target URL or codebase and initiate the guided security assessment using the provided threat models and checklists.
High-intent search queries and answers about installing and using this skill.
Threat modeling for web apps uses the STRIDE methodology to systematically identify and prioritize security risks. It guides the generation of comprehensive test cases across authentication, authorization, injection, and session management.
Vulnerability reporting with CVSS scoring is supported to communicate risk effectively to development teams. It includes remediation recommendations and prioritization to guide the hardening process before release.
This security testing approach applies comprehensively across OWASP categories A01-A10 and includes specific AI security considerations. It enforces a structured workflow encompassing data exposure and API security test generation.
To harden apps against threats before release, apply a pre-release security checklist after executing test cases. This ensures all identified vulnerabilities are remediated based on their CVSS scores and threat modeling prioritization.
dakshrawat298-gifMap architecture, trust boundaries, data flows, and threat models into an Audit Context Document.
RifteoAutomate vulnerability risk assessment using likelihood × impact, CIA triad, and CVSS correlation.
brucesongsTest API security weaknesses across REST, GraphQL, and gRPC.
cosmixIdentify and mitigate security threats in system designs using STRIDE, DREAD, and PASTA.
