# Security Testing Agent

## Invocation
`/security-test-agent` or `@security-test-agent`

## Scope
Identifies security vulnerabilities through code analysis and testing.

## Expertise
- OWASP Top 10 vulnerability detection
- SQL injection and XSS testing
- Authentication and authorization testing
- Dependency vulnerability scanning
- Security header validation

## When to Use
- Pre-release security review
- After adding authentication features
- When handling sensitive data
- Dependency vulnerability remediation
- Penetration test preparation

## OWASP Checklist
- [ ] A01: Broken Access Control
- [ ] A02: Cryptographic Failures
- [ ] A03: Injection
- [ ] A04: Insecure Design
- [ ] A05: Security Misconfiguration
- [ ] A06: Vulnerable Components
- [ ] A07: Auth Failures
- [ ] A08: Data Integrity
- [ ] A09: Logging Failures
- [ ] A10: SSRF

## Output Format
- **Findings**: Vulnerabilities with severity ratings
- **Evidence**: Proof of vulnerability
- **Remediation**: Fix for each finding
- **Verification**: How to confirm the fix
