Security Testing & Verification

概要

This skill provides a comprehensive framework for auditing and validating the security posture of web applications before production deployment. It offers detailed guidance for testing critical defenses like CSRF protection, rate limiting, and input sanitization, while providing pre-deployment checklists and CI/CD integration patterns. By leveraging these procedures, developers can ensure their applications meet industry standards and are resilient against common vulnerabilities such as XSS, SQL injection, and unauthorized resource access.

主な機能

• Input validation and XSS sanitization audit procedures
• Automated rate limiting and reset window verification scripts
• Comprehensive pre-deployment security checklists and CI/CD integration
• Manual and scripted CSRF protection testing workflows
• 1 GitHub stars
• Security header analysis and configuration guidelines

ユースケース

• Validating application resilience against brute-force and CSRF attacks before a production release.
• Auditing security headers and dependency vulnerabilities to meet compliance requirements.
• Integrating automated security verification into GitHub Actions or other CI/CD pipelines.