security-testing

Guide phase-based security assessments with OWASP Top 10 and CVSS scoring.

6|Updated Apr 7, 2026
One-click install
npx skills add https://github.com/Kgan01/ghengis-skills --skill security-testing-kgan01
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-testing
Source: https://github.com/Kgan01/ghengis-skills/tree/main/plugins/ghengis-skills/skills/security-testing
Command: npx skills add https://github.com/Kgan01/ghengis-skills --skill security-testing-kgan01

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Reviews and strengthens code security by enabling structured vulnerability assessments, risk classification, and remediation guidance for development teams.

Core Features & Use Cases

  • Phase-based security assessment covering recon, vulnerability identification, remediation, and hardening verification.
  • OWASP Top 10 coverage, CVSS scoring, and secure coding pattern guidance.
  • Use Case: Before a release, perform a security audit on a web service to identify common vulnerabilities and prepare remediation plans.

Quick Start

Run a guided security review on your project to begin a vulnerability assessment with recommended actions.

Frequently Asked Questions about security-testing

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a security vulnerability assessment on my codebase before a release?

A security vulnerability assessment identifies code flaws through structured phases: reconnaissance, vulnerability identification, and remediation. This process applies OWASP Top 10 coverage and CVSS scoring to evaluate risks across codebases, APIs, and CI pipelines.

What is phase-based security testing and how does it guide secure remediation?

Phase-based security testing structures code review into reconnaissance, vulnerability identification, remediation, and hardening verification. This approach ensures systematic coverage of security posture and provides clear remediation guidance for development teams.

Can I use this security review approach for CI pipelines and APIs?

Yes, this security review approach applies to codebases, APIs, and CI pipelines across development teams. It evaluates code security posture and supports incident response and hardening efforts using structured phase-based analysis.

How do I calculate CVSS scores for identified code vulnerabilities?

CVSS scores are calculated during the vulnerability identification phase to classify risk severity. This assessment integrates OWASP Top 10 coverage and CVSS scoring to prioritize and prepare clear remediation plans for secure coding.

What is the best way to cover OWASP Top 10 vulnerabilities during a code review?

The best way to cover OWASP Top 10 vulnerabilities is through a guided security review that applies phase-based analysis. This method evaluates code security posture, identifies common vulnerabilities, and recommends secure coding patterns and hardening actions.

Does this vulnerability identification process work for incident response?

Yes, this vulnerability identification process supports incident response efforts by evaluating code security posture and providing clear remediation guidance. It applies structured phase-based analysis and CVSS scoring to assess and harden affected systems.