security-test-suite

Identify and remediate security vulnerabilities via SAST, SCA, secret scanning, and infrastructure checks.

Updated Aug 23, 2026

Search Tags:#owasp #sast #secret-detection #security-testing #sca

Ready to run

npx skills add https://github.com/chaserbreitenbach/claude-skills-and-agents --skill security-test-suite

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-test-suite
Source: https://github.com/chaserbreitenbach/claude-skills-and-agents/tree/main/skills/testing/security-test-suite
Command: npx skills add https://github.com/chaserbreitenbach/claude-skills-and-agents --skill security-test-suite

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Comprehensive security testing framework aligned with OWASP Top 10 and CWE/SANS Top 25. Performs static analysis (SAST), dependency auditing (SCA), secret scanning, and infrastructure security checks. Generates actionable remediation reports with CVSS severity scoring.

Core Features & Use Cases

SAST: static code analysis to detect vulnerabilities early in the development cycle.
SCA: known vulnerability scanning and license compliance for dependencies.
Secrets: detection of hardcoded credentials and secrets.
Infrastructure: IaC and container security checks for secure deployments.
Remediation Reports: actionable, CVSS-scored guidance for developers and security teams.

Quick Start

Run the security-test-suite to perform an automated security assessment of your codebase and generate a remediation report.

Frequently Asked Questions about security-test-suite

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I automate SAST, SCA, and secret scanning for my codebase?▼

Automate SAST, SCA, and secret scanning by running this security-test-suite to identify vulnerabilities in your software project, generating a CVSS-scored remediation report for developers and security teams.

What is CVSS-based remediation scoring in security testing?▼

CVSS-based remediation scoring prioritizes vulnerability fixes by severity. This security testing approach generates action-oriented reports guiding developers and security teams through remediation efforts.

Does this security testing framework support infrastructure and IaC checks?▼

Yes, this security testing framework supports infrastructure security checks. It performs IaC and container security checks to ensure secure deployments across web and cloud environments.

Can I use this for pre-deployment security reviews and compliance efforts?▼

Yes, you can use this for pre-deployment security reviews, third-party integrations, and ongoing compliance efforts. It performs automated vulnerability detection aligned with OWASP Top 10 and CWE/SANS Top 25 standards.

Do I need additional dependencies to perform dependency auditing and license compliance?▼

No additional dependencies are required. The security-test-suite performs Software Composition Analysis (SCA) natively, handling known vulnerability scanning and license compliance for your project dependencies.