Generates comprehensive, OWASP-aligned security test cases and payloads for web applications and APIs.
The Security Test Generator skill empowers developers and QA engineers to proactively identify vulnerabilities by automating the creation of security-focused test scenarios. By analyzing your project's attack surface—including authentication mechanisms, database interactions, and input points—it maps out relevant OWASP Top 10 categories and generates detailed test cases for injection, broken access control, and sensitive data exposure. Whether you need specific SQLi payloads or complex authorization logic tests, this skill provides the structured guidance and code snippets necessary to harden your application against common web threats.
主要功能
01Generation of specialized payloads for SQLi, XSS, and Command Injection
02Comprehensive test coverage for OWASP Top 10 vulnerability categories
030 GitHub stars
04Exportable security test code in Python/Pytest format
05Automated attack surface discovery and web framework detection
06Authorization and authentication flow verification checklists
使用场景
01Validating input sanitization against diverse injection attack vectors
02Auditing API endpoints for IDOR and privilege escalation vulnerabilities
03Reviewing security headers and CORS configurations for misconfigurations
