security-testing-verification

Automate security testing by running pre-built scripts that validate CSRF token protection, rate-limiting enforcement, and input sanitization across your REST endpoints. This Skill provides executable verification scripts using curl and jq to test protected routes, token lifecycles, and HTTP status assertions without manual effort.

Verify CSRF protection, rate limiting, input validation, and security headers using automated checks. This Skill provides a structured pre-deployment checklist covering all critical security areas to ensure your application blocks unauthorized actions, handles excessive requests correctly, and sanitizes malicious input.

Yes, this Skill automates testing rate-limited APIs and CSRF-token lifecycles across REST endpoints using scripts that validate HTTP status codes and security responses. It supports both protected routes and public endpoints to comprehensively verify your security posture.

You need Node.js, curl for HTTP requests, and jq for JSON processing. These lightweight dependencies enable the Skill's scripts to execute security tests against your application and parse responses to validate security headers, rate-limit behavior, and token handling.

Automated security testing eliminates manual verification uncertainty by running repeatable scripts that catch misconfigured CSRF protection, disabled rate limiting, and input validation gaps before production. This ensures consistent security validation across every deployment.