skills.rest
petrkindlmann
petrkindlmannCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

security-testing

Orchestrates automated web app security testing across SAST, DAST, and dependency scanners in CI.

64|12|Updated Mar 23, 2026
Search Tags:#testing#security#owasp#sast#ci-cd#zap#dependency-scanning
One-click install
npx skills add https://github.com/petrkindlmann/qa-skills --skill security-testing-petrkindlmann
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-testing
Source: https://github.com/petrkindlmann/qa-skills/tree/main/skills/security-testing
Command: npx skills add https://github.com/petrkindlmann/qa-skills --skill security-testing-petrkindlmann

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Test application security systematically against known vulnerability classes with automated tooling integrated into CI.

Core Features & Use Cases

  • Automated security testing orchestration across SAST, DAST (ZAP), and dependency scanners.
  • CI/CD integrated security testing for PRs and releases.
  • Use Case: integrate security-testing into a pipeline to continuously validate OWASP Top 10 coverage.

Quick Start

Run a security validation suite in your CI pipeline to continuously validate OWASP Top 10 coverage.

Frequently Asked Questions about security-testing

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate security testing for OWASP Top 10 coverage in a CI/CD pipeline?▼

Automating security testing for OWASP Top 10 coverage involves orchestrating SAST, DAST, and dependency scans within your CI/CD pipeline to validate code, configurations, and dependencies on every build.

Can I use ZAP and Snyk to scan web applications for vulnerabilities continuously?▼

Yes, you can use ZAP and Snyk to continuously scan web applications by integrating them into your CI pipeline, enabling automated DAST and dependency checks across your services.

What is the best way to run SAST and dependency scanning on every pull request?▼

The best way to run SAST and dependency scanning on every pull request is to configure your CI/CD pipeline to trigger automated security validation suites against code and dependencies during PR builds.

Do I need ESLint security plugins to identify security gaps in front-end code?▼

Yes, ESLint security plugins are required alongside SAST tools to identify security gaps in front-end and back-end code, configurations, and dependencies within your web applications.

How does CI integrated security testing reduce vulnerability risk for API services?▼

CI integrated security testing reduces vulnerability risk for API services by systematically applying automated checks across code and configurations, validating against known vulnerability classes before deployment.

What are the limitations of automated security testing for web applications?▼

Automated security testing for web applications requires integration with specific tools like ZAP and Snyk, and its effectiveness is limited to known vulnerability classes detected through SAST, DAST, and dependency scanning.

Related Skills

Explore More Software Engineering Skills→
rnavarychrnavarych
14

role-aqa:security-testing

Your response is missing. Please try again.

Community
Advanced
cornmanwtfcornmanwtf

penetration-testing-runner

Execute automated SAST/DAST and vulnerability scans for security compliance.

Community
Advanced
yasarremreyasarremre

reviewer

Audit code changes for quality, security, and best practices.

Community
Advanced
LimaTechnologiesLimaTechnologies

security-scan

Audit code security for OWASP Top 10 vulnerabilities in TypeScript/Node.js projects.

Community
Advanced