security-testing
Catch security flaws before your code merges.
What it does
Creates automated security tests and CI gates that detect application vulnerabilities and verify that security checks fail when expected.
When to use it
Use for automated vulnerability scanning and attacker-oriented security tests in CI, rather than manual penetration testing.
How to use it
Give it an application project to secure; it produces runnable security tests, coverage mapping, and CI gates.
What you provide
- An existing project
Uses
What you need · 4
Requires Docker to run the deliberately vulnerable local application used to verify that security assertions fail.
Requires a reachable staging application for the ZAP baseline scan and the passing security-test run.
Access · 3
This skill
OSV database
Queries the OSV vulnerability database
trufflesecurity/trufflehog@main
TruffleHog from its main branch