Can this skill be used for API testing?

Absolutely. It is designed to test both web applications and APIs for security weaknesses and can be scoped to specific endpoints.

Does it provide actionable advice for fixing security issues?

Yes, the skill generates a comprehensive report that highlights identified vulnerabilities, assigns severity ratings, and provides specific remediation steps to secure your code.

Is it possible to automate these tests in a pipeline?

Yes, this skill is built for integration, allowing you to trigger automated security audits as part of a CI/CD pipeline or immediately after significant code changes.

What vulnerabilities does the Security Test Scanner cover?

The skill covers the OWASP Top 10 vulnerabilities, specifically focusing on SQL injection, Cross-Site Scripting (XSS), CSRF, and various authentication or authorization flaws.

How do I trigger a security scan using Claude Code?

You can trigger the skill by asking Claude to perform a 'security test', 'vulnerability scan', or by mentioning specific threats like 'SQL injection' or 'XSS' in the context of your project.

Security Test Scanner

Name: Security Test Scanner
Author: intent-solutions-io

byintent-solutions-io

セキュリティとテスト

Automates comprehensive security vulnerability testing and penetration scanning for applications and APIs.

概要

The Security Test Scanner skill empowers Claude to proactively identify and report critical application vulnerabilities by automating industry-standard security checks. It covers the full spectrum of the OWASP Top 10, including SQL injection, cross-site scripting (XSS), and broken authentication, providing developers with detailed reports that categorize risk severity and offer actionable remediation steps. This skill is essential for maintaining a high security posture during development, ensuring that potential exploits are caught before code reaches production.

主な機能

Automated OWASP Top 10 vulnerability assessment
Deep scanning for SQL injection and Cross-Site Scripting (XSS)
Seamless integration with CI/CD pipelines and DevOps workflows
0 GitHub stars
Detailed security report generation with remediation steps
Authentication and authorization flaw detection

ユースケース

Scanning application inputs to prevent injection and CSRF attacks
Performing a full security audit on a new REST or FastAPI endpoint
Verifying security compliance before merging code into production

概要

主な機能

Automated OWASP Top 10 vulnerability assessment
Deep scanning for SQL injection and Cross-Site Scripting (XSS)
Seamless integration with CI/CD pipelines and DevOps workflows
0 GitHub stars
Detailed security report generation with remediation steps
Authentication and authorization flaw detection

ユースケース

Scanning application inputs to prevent injection and CSRF attacks
Performing a full security audit on a new REST or FastAPI endpoint
Verifying security compliance before merging code into production