security-test-generator

Generate framework-ready security test suites for REST or GraphQL services.

1|Updated Mar 25, 2026
One-click install
npx skills add https://github.com/kalshamsi/claude-security-skills --skill security-test-generator-kalshamsi
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-test-generator
Source: https://github.com/kalshamsi/claude-security-skills/tree/main/skills/security-test-generator
Command: npx skills add https://github.com/kalshamsi/claude-security-skills --skill security-test-generator-kalshamsi

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Automates the creation of runnable security test suites to validate web applications against common vulnerabilities.

Core Features & Use Cases

  • Generates tests for SQL Injection, XSS, CSRF, authentication bypass, path traversal, SSRF, and mass assignment.
  • Outputs framework-ready tests for JavaScript/TypeScript (jest+supertest) or Python (pytest+requests), enabling rapid coverage across Express, FastAPI, Flask, etc.
  • Maps tests to CWE and OWASP Top 10:2021/2023 standards for consistent vulnerability regression.

Quick Start

Generate a runnable security test suite for my web API using JavaScript (jest+supertest) or Python (pytest+requests).

Frequently Asked Questions about security-test-generator

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I generate security tests for a REST API to check for OWASP vulnerabilities?

To generate security tests for a REST API, you can produce framework-ready test suites that probe endpoints for CWE and OWASP-aligned vulnerabilities like SQLi, XSS, and CSRF. The generated tests map directly to OWASP Top 10 standards for consistent regression testing.

Can I create automated security test suites for Python web apps?

Yes, you can create automated security test suites for Python web apps. The process outputs pytest and requests framework-ready tests that validate Flask or FastAPI endpoints against common vulnerabilities like SSRF and path traversal.

What's the best way to automate SQL injection and XSS test generation for JavaScript APIs?

Automating SQL injection and XSS test generation for JavaScript APIs is best handled by producing jest and supertest framework-ready templates. These templates probe GraphQL or REST endpoints and map detected issues to specific CWE entries.

Does automated security test generation cover authentication bypass and mass assignment vulnerabilities?

Yes, automated security test generation covers authentication bypass and mass assignment vulnerabilities. It produces runnable test templates that probe web application endpoints for these issues alongside SQLi, XSS, CSRF, path traversal, and SSRF.

How do I map web application security tests to CWE and OWASP Top 10 standards?

You map web application security tests to CWE and OWASP Top 10 standards by generating test suites explicitly aligned with these frameworks. Each generated test template probes for specific vulnerabilities and includes the corresponding CWE and OWASP mappings for regression tracking.

Are generated security tests compatible with GraphQL services?

Yes, generated security tests are compatible with GraphQL services. The test generation process applies to both REST and GraphQL APIs written in JavaScript, TypeScript, or Python, producing runnable tests that probe endpoints for common web vulnerabilities.