Security Testing

Covers the essential security testing bases with OWASP ZAP for dynamic scanning, SQL injection and XSS testing, dependency vulnerability checks, and secrets detection. You get practical examples for each OWASP Top 10 category plus authentication, CSRF, and security headers validation. The approach mixes automated scanning with manual penetration testing patterns. Best for integrating security checks into CI/CD pipelines or running periodic vulnerability assessments. The reference guides are comprehensive, though you'll need to set up ZAP and other tools yourself. One honest take: this gives you the playbook, but security testing still requires understanding what you're looking for, not just running the scripts.

skills.sh installs: 607
GitHub stars: 379
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add aj-geddes/useful-ai-prompts --skill security-testing --agent claude-code

Installs into .claude/skills of the current project.

Files

Overview

Security testing identifies vulnerabilities, weaknesses, and threats in applications to ensure data protection, prevent unauthorized access, and maintain system integrity. It combines automated scanning (SAST, DAST) with manual penetration testing and code review.

When to Use

Testing for OWASP Top 10 vulnerabilities
Scanning dependencies for known vulnerabilities
Testing authentication and authorization
Validating input sanitization
Testing API security
Checking for sensitive data exposure
Validating security headers
Testing session management

Quick Start

Minimal working example:

# security_scan.py
from zapv2 import ZAPv2
import time

class SecurityScanner:
    def __init__(self, target_url, api_key=None):
        self.zap = ZAPv2(apikey=api_key, proxies={
            'http': 'http://localhost:8080',
            'https': 'http://localhost:8080'
        })
        self.target = target_url

SKILL.md on GitHub