skills.rest
bobmatnyc
bobmatnycCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

Security & Vulnerability Testing

Automate security testing and vulnerability detection across code, dependencies, and infrastructure.

20|5|Updated Nov 22, 2025
Search Tags:#security#vulnerability#CI/CD#threat-modeling#DAST#analyze#SAST
One-click install
npx skills add https://github.com/bobmatnyc/mcp-skillset --skill security-vulnerability-testing
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: Security & Vulnerability Testing
Source: https://github.com/bobmatnyc/mcp-skillset/tree/main/docs/skill-templates/security-testing
Command: npx skills add https://github.com/bobmatnyc/mcp-skillset --skill security-vulnerability-testing

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill automates comprehensive security testing and vulnerability detection across code, dependencies, and infrastructure, helping teams reduce risk and accelerate remediation.

Core Features & Use Cases

  • SAST/DAST coverage for code, configurations, and deployments
  • Threat modeling using STRIDE to prioritize mitigations
  • CI/CD integration with on-demand scans and actionable reports

Quick Start

Use the built-in workflow to run a security scan on your project and inspect the generated report for prioritized fixes.

Frequently Asked Questions about Security & Vulnerability Testing

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate SAST and DAST vulnerability testing in my CI/CD pipeline?▼

Threat modeling using the STRIDE methodology helps prioritize security mitigations by systematically identifying threats across your application architecture, allowing you to focus remediation efforts on the most critical vulnerabilities first.

Do I need external tools like OWASP ZAP and Snyk to run security scans?▼

This Skill detects vulnerabilities across web apps, APIs, and Infrastructure as Code (IaC) by combining SAST for static code analysis and DAST for dynamic deployment testing, ensuring comprehensive coverage of your application stack.

How do I generate a security report with prioritized fixes for my project?▼

Security automation accelerates remediation by continuously scanning code, dependencies, and infrastructure throughout development and deployment, reducing manual overhead and helping teams systematically lower risk before release.

What is the best way to perform threat modeling for web application security?▼

You must install required external security tools like OWASP ZAP, Snyk, Bandit, GitGuardian, and Checkov through standard package managers before running scans, as the Skill depends on them to enable analysis workflows.

Related Skills

Explore More Software Engineering Skills→
JaiminVadadoriyaJaiminVadadoriya
1

security-testing

Automate OWASP Top 10 security testing for web applications and microservices.

Community
Advanced
shalevaminshalevamin

security-reviewer

Identify security vulnerabilities in code and infrastructure with structured audit reports.

Community
Advanced
HelloEverybobyHelloEveryboby
17

SDLCOrchestrator

Automate SAST, DAST, and SCA security scans in CI/CD pipelines.

Community
Intermediate
damianpapadopoulosdamianpapadopoulos
6

security-scanner

Scan code changes for security vulnerabilities using static and dynamic analysis tools.

Community
Advanced