Can I use this for API security testing?

Yes, it is specifically designed to test both web applications and API endpoints for common security weaknesses.

Does it provide remediation advice?

Yes, the generated reports include detailed severity ratings and specific steps to fix the identified vulnerabilities.

What vulnerabilities does this skill detect?

It scans for OWASP Top 10 risks, including SQL injection, XSS, CSRF, and authentication or authorization flaws.

Is it suitable for automated penetration testing?

Yes, it functions as an automated penetration testing tool, helping developers find common exploits before they reach production.

Can this be integrated into my CI/CD workflow?

Absolutely; it can be integrated with other plugins to trigger security tests automatically after code changes or before deployment.

Security Test Scanner

Name: Security Test Scanner
Author: BbgnsurfTech

byBbgnsurfTech

•

安全与测试

Automates security vulnerability testing for applications and APIs to identify OWASP Top 10 risks and injection flaws.

关于

This skill empowers Claude to conduct comprehensive security assessments and penetration tests directly within your development environment. By leveraging the security-test-scanner plugin, it automatically evaluates applications and APIs for critical vulnerabilities such as SQL injection, Cross-Site Scripting (XSS), and Cross-Site Request Forgery (CSRF). Whether you are performing a scheduled audit or verifying a new endpoint, this skill provides actionable reports with severity ratings and remediation steps, ensuring your code remains secure and compliant with industry standards.

主要功能

Assessment of authentication and authorization flaws
3 GitHub stars
Automated OWASP Top 10 vulnerability scanning
Detailed security reporting with severity-based remediation steps
Detection of SQL injection and Cross-Site Scripting (XSS) risks
Seamless integration with CI/CD pipelines for automated testing

使用场景

Testing web forms and inputs for injection-based security weaknesses
Automating vulnerability scans during the deployment phase of a CI/CD pipeline
Performing a security audit on a new REST API endpoint

关于

主要功能

Assessment of authentication and authorization flaws
3 GitHub stars
Automated OWASP Top 10 vulnerability scanning
Detailed security reporting with severity-based remediation steps
Detection of SQL injection and Cross-Site Scripting (XSS) risks
Seamless integration with CI/CD pipelines for automated testing

使用场景

Testing web forms and inputs for injection-based security weaknesses
Automating vulnerability scans during the deployment phase of a CI/CD pipeline
Performing a security audit on a new REST API endpoint