security-test-generator

To generate security test cases from non-functional requirements, this Skill automates threat modeling and test scenario creation by mapping NFRs and architectural designs to OWASP Top 10 vulnerabilities and STRIDE threats, producing detailed Given-When-Then test formats.

STRIDE threat modeling is a framework categorizing security risks into Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege. It applies to security testing by systematically identifying threats from NFRs to prioritize critical security test scenarios.

Yes, you can map OWASP Top 10 vulnerabilities to specific test scenarios for web APIs. The Skill evaluates security NFRs and architectural designs to identify relevant OWASP risks like Cryptographic Failures, generating prioritized L3 level test cases in a Given-When-Then format.

You create Given-When-Then test scenarios for mobile application security by inputting your NFRs and architecture design. The Skill processes these inputs to generate STRIDE threat models and OWASP mapped test cases, prioritizing critical security risks for mobile platforms.

Yes, this security testing approach supports L3 level test case generation. It creates detailed, structured test cases in the Given-When-Then format from NFR security requirements and architectural designs, ensuring comprehensive coverage of critical security risks for web, API, and mobile applications.