security-test-suite

Identify and remediate security vulnerabilities via SAST, SCA, secret scanning, and infrastructure checks.

Updated Aug 23, 2026
One-click install
npx skills add https://github.com/chaserbreitenbach/claude-skills-and-agents --skill security-test-suite
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-test-suite
Source: https://github.com/chaserbreitenbach/claude-skills-and-agents/tree/main/skills/testing/security-test-suite
Command: npx skills add https://github.com/chaserbreitenbach/claude-skills-and-agents --skill security-test-suite

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Comprehensive security testing framework aligned with OWASP Top 10 and CWE/SANS Top 25. Performs static analysis (SAST), dependency auditing (SCA), secret scanning, and infrastructure security checks. Generates actionable remediation reports with CVSS severity scoring.

Core Features & Use Cases

  • SAST: static code analysis to detect vulnerabilities early in the development cycle.
  • SCA: known vulnerability scanning and license compliance for dependencies.
  • Secrets: detection of hardcoded credentials and secrets.
  • Infrastructure: IaC and container security checks for secure deployments.
  • Remediation Reports: actionable, CVSS-scored guidance for developers and security teams.

Quick Start

Run the security-test-suite to perform an automated security assessment of your codebase and generate a remediation report.

Frequently Asked Questions about security-test-suite

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate SAST, SCA, and secret scanning for my codebase?▼

Automate SAST, SCA, and secret scanning by running this security-test-suite to identify vulnerabilities in your software project, generating a CVSS-scored remediation report for developers and security teams.

What is CVSS-based remediation scoring in security testing?▼

CVSS-based remediation scoring prioritizes vulnerability fixes by severity. This security testing approach generates action-oriented reports guiding developers and security teams through remediation efforts.

Does this security testing framework support infrastructure and IaC checks?▼

Yes, this security testing framework supports infrastructure security checks. It performs IaC and container security checks to ensure secure deployments across web and cloud environments.

Can I use this for pre-deployment security reviews and compliance efforts?▼

Yes, you can use this for pre-deployment security reviews, third-party integrations, and ongoing compliance efforts. It performs automated vulnerability detection aligned with OWASP Top 10 and CWE/SANS Top 25 standards.

Do I need additional dependencies to perform dependency auditing and license compliance?▼

No additional dependencies are required. The security-test-suite performs Software Composition Analysis (SCA) natively, handling known vulnerability scanning and license compliance for your project dependencies.