security-test-suite

Identify and remediate security vulnerabilities via SAST, SCA, secret scanning, and infrastructure checks.

Updated Aug 23, 2026
One-click install
npx skills add https://github.com/chaserbreitenbach/claude-skills-and-agents --skill security-test-suite
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-test-suite
Source: https://github.com/chaserbreitenbach/claude-skills-and-agents/tree/main/skills/testing/security-test-suite
Command: npx skills add https://github.com/chaserbreitenbach/claude-skills-and-agents --skill security-test-suite

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Comprehensive security testing framework aligned with OWASP Top 10 and CWE/SANS Top 25. Performs static analysis (SAST), dependency auditing (SCA), secret scanning, and infrastructure security checks. Generates actionable remediation reports with CVSS severity scoring.

Core Features & Use Cases

  • SAST: static code analysis to detect vulnerabilities early in the development cycle.
  • SCA: known vulnerability scanning and license compliance for dependencies.
  • Secrets: detection of hardcoded credentials and secrets.
  • Infrastructure: IaC and container security checks for secure deployments.
  • Remediation Reports: actionable, CVSS-scored guidance for developers and security teams.

Quick Start

Run the security-test-suite to perform an automated security assessment of your codebase and generate a remediation report.

Frequently Asked Questions about security-test-suite

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate SAST, SCA, and secret scanning for my codebase?

Automate SAST, SCA, and secret scanning by running this security-test-suite to identify vulnerabilities in your software project, generating a CVSS-scored remediation report for developers and security teams.

What is CVSS-based remediation scoring in security testing?

CVSS-based remediation scoring prioritizes vulnerability fixes by severity. This security testing approach generates action-oriented reports guiding developers and security teams through remediation efforts.

Does this security testing framework support infrastructure and IaC checks?

Yes, this security testing framework supports infrastructure security checks. It performs IaC and container security checks to ensure secure deployments across web and cloud environments.

Can I use this for pre-deployment security reviews and compliance efforts?

Yes, you can use this for pre-deployment security reviews, third-party integrations, and ongoing compliance efforts. It performs automated vulnerability detection aligned with OWASP Top 10 and CWE/SANS Top 25 standards.

Do I need additional dependencies to perform dependency auditing and license compliance?

No additional dependencies are required. The security-test-suite performs Software Composition Analysis (SCA) natively, handling known vulnerability scanning and license compliance for your project dependencies.