skills.rest
ConductionNL
ConductionNLOFFICIAL
Explore all skills by this author →
WebsiteGitHub

test-security

Detect and validate OWASP Top 10 security weaknesses in web applications.

Updated Mar 26, 2026
Search Tags:#testing#security#owasp#rbac#multitenancy#nis2#bio2
One-click install
npx skills add https://github.com/ConductionNL/decidesk --skill test-security-conductionnl
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: test-security
Source: https://github.com/ConductionNL/decidesk/tree/main/.claude/skills/test-security
Command: npx skills add https://github.com/ConductionNL/decidesk --skill test-security-conductionnl

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Security testing to identify and remediate vulnerabilities in web apps, ensuring compliance with security standards, including OWASP Top 10 and BIO2/NIS2.

Core Features & Use Cases

  • RBAC & Authorization Testing: Validate role-based access control and permissions across admin and user contexts.
  • Multi-Tenancy Isolation: Verify data isolation between organizations and ensure cross-tenant boundaries are respected.
  • Input Validation & Injection Testing: Detect XSS, SQL injection, and command injection vulnerabilities in both browser and API surfaces.
  • CORS & CSRF Configuration: Assess cross-origin protections and CSRF mitigations for public endpoints.
  • Security Reporting: Produce structured test reports that guide remediation and risk reduction.

Quick Start

Run the security test against the active deployment to verify RBAC, multi-tenant isolation, and input validation.

Frequently Asked Questions about test-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I test web application security for OWASP Top 10 vulnerabilities?▼

Web application security testing detects and validates weaknesses like injection flaws by applying browser and API testing steps, threat modeling, and structured reporting to guide remediation for OWASP Top 10 compliance.

How do I validate RBAC enforcement across admin and user contexts?▼

Validating RBAC enforcement requires testing role-based access control and permissions across admin and user contexts to detect authorization weaknesses in both browser and API surfaces, producing a formal security report.

What is the best way to verify multi-tenant isolation between organizations?▼

Verifying multi-tenant isolation involves testing cross-tenant boundaries to ensure data isolation between organizations is respected, detecting unauthorized access across tenants through targeted browser and API security tests.

Can I assess CORS and CSRF configurations for public endpoints?▼

Assessing CORS and CSRF configurations evaluates cross-origin protections and CSRF mitigations for public endpoints, identifying security weaknesses in web applications through automated testing steps.

Does BIO2 and NIS2 compliance require specific input validation testing?▼

BIO2 and NIS2 compliance requires input validation testing to detect XSS, SQL injection, and command injection vulnerabilities across browser and API surfaces, ensuring web apps meet security standards through structured remediation reports.

When should I run automated security tests against my active deployment?▼

Automated security tests should run against active deployments to verify RBAC, multi-tenant isolation, and input validation, detecting vulnerabilities like injection flaws and misconfigured CORS/CSRF before formal reporting.

Related Skills

Explore More Legal & Compliance Skills→
dapperdiversdapperdivers
1

vuln-scan

Scan web applications for vulnerabilities using nuclei and nikto.

Community
Advanced
NickCrewNickCrew
29

owasp-top-10

Identify OWASP Top 10 security vulnerabilities in web applications.

Community
Advanced
ilandahanilandahan
9

system-architect

Design security-first system architectures for multi-tenant SaaS applications.

Community
Advanced
uphiagouphiago
1.1k

hunt-llm-ai

Identify exploitable LLM/AI vulnerabilities crossing trust boundaries with validation gates.

Community
Advanced