security-test

Plan and execute security testing for web apps and APIs.

4|1|Updated Mar 24, 2026

Search Tags:#testing #security #vulnerability #owasp #reporting #threat-modeling #penetration

Ready to run

npx skills add https://github.com/nntan90/qa-skill-suite --skill security-test

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-test
Source: https://github.com/nntan90/qa-skill-suite/tree/main/security-test
Command: npx skills add https://github.com/nntan90/qa-skill-suite --skill security-test

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes assets (resource) components.

What problem does it solve?

Security testing for web apps and APIs is essential but often manual, error-prone, and time-consuming. This skill provides a structured approach to plan, execute, and document security assessments aligned with OWASP and ISTQB-inspired practices.

Core Features & Use Cases

Threat modeling and risk prioritization guided by STRIDE.
Comprehensive test case generation across authentication, authorization, injection, session management, data exposure, and API security.
Vulnerability reporting with CVSS scoring and remediation recommendations for development teams.

Quick Start

Define your target URL or codebase and initiate the guided security assessment using the provided threat models and checklists.

Frequently Asked Questions about security-test

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I plan and execute security testing for web apps and APIs?▼

Threat modeling for web apps uses the STRIDE methodology to systematically identify and prioritize security risks. It guides the generation of comprehensive test cases across authentication, authorization, injection, and session management.

Can I generate vulnerability reports with CVSS scoring for development teams?▼

Vulnerability reporting with CVSS scoring is supported to communicate risk effectively to development teams. It includes remediation recommendations and prioritization to guide the hardening process before release.

Does this security testing approach cover OWASP categories and AI security considerations?▼

This security testing approach applies comprehensively across OWASP categories A01-A10 and includes specific AI security considerations. It enforces a structured workflow encompassing data exposure and API security test generation.

What is the best way to harden apps against threats before release?▼

To harden apps against threats before release, apply a pre-release security checklist after executing test cases. This ensures all identified vulnerabilities are remediated based on their CVSS scores and threat modeling prioritization.