{
  "type": "skill",
  "slug": "webapp-testing-checklist",
  "name": "Webapp Testing Checklist",
  "author": "AccessITGroup",
  "description": "Structures an authorized web app pentest around the OWASP Web Security Testing Guide (WSTG) methodology as a checklist, and turns tester-supplied evidence into a WSTG-numbered findings report — backseat mode only, it never sends payloads or runs scanners.",
  "github_url": "https://github.com/AccessITGroup/webapp-testing-checklist",
  "license": "MIT",
  "tier": "contributed",
  "tags": [
    "pentest",
    "owasp",
    "wstg",
    "web-security",
    "security-testing",
    "checklist",
    "findings-report"
  ],
  "integrations": [
    "Anthropic"
  ],
  "domains": [
    "application-security"
  ],
  "date_added": "2026-09-03",
  "last_reviewed": "2026-09-08",
  "works_with_tenable_hexa_mcp": false,
  "compatible_platforms": [
    "Claude Code"
  ],
  "invocation": "No fixed slash command — triggered by natural-language requests like \"run this through WSTG\" or \"OWASP testing guide checklist for this app\", or invoked directly by skill name (webapp-testing-checklist)",
  "repo": {
    "found": true,
    "archived": false,
    "pushed_at": "2026-09-03T18:15:47Z",
    "stars": 10,
    "forks": 0,
    "open_issues": 0,
    "owner_type": "user",
    "language": null,
    "checked_at": "2026-11-05T20:35:15.821Z"
  },
  "url": "https://exchange.tenable.com/skills/webapp-testing-checklist",
  "json_url": "https://exchange.tenable.com/api/skills/webapp-testing-checklist.json",
  "markdown_url": "https://exchange.tenable.com/skills/webapp-testing-checklist.md",
  "source_url": "https://github.com/tenable/cyberagents-exchange/blob/main/skills/webapp-testing-checklist.md"
}