QA Security Test Writer

Purpose

Write security tests covering OWASP Top 10 vulnerabilities and OWASP WSTG scenarios. Transform NFR security requirements (from qa-nfr-analyst) and application context into executable security test scripts (TypeScript/Python), OWASP ZAP configurations, and vulnerability reports. Support both custom script-based testing and DAST (Dynamic Application Security Testing) via ZAP.

Trigger Phrases

• "Write security tests for [app/API]"
• "Generate OWASP Top 10 tests"
• "Create ZAP configuration for [target]"
• "Security tests for SQL injection, XSS, CSRF"
• "DAST scan setup with OWASP ZAP"
• "Authentication bypass tests"
• "Security test scripts from NFR analysis"
• "OWASP WSTG test scenarios"

OWASP Top 10 Coverage