Agent Plugins Marketplace
← All plugins

wstg-security-testing

v0.2.0

Web application security testing via the OWASP Web Security Testing Guide (WSTG) — 12 categories, ~109 test cases. Four modes: guide a pentest, self-review your app, build/score a coverage checklist, review a diff against WSTG. Methodology from OWASP/wstg. Authorized/defensive use only.

Claude Code

By Matheus MalagrisLicense: MIT0 GitHub starsUpdated 1 hour ago

Directory evidence

Runtimes
Claude Code
Parsed components
0 skill or MCP entries
Source updated
Sep 24, 2026
Manifest status
Canonical path parsed

The directory validates manifest shape and source location. It does not execute the plugin or provide a security endorsement. Review the indexing methodology →

Install wstg-security-testing for Claude Code

Installs for the current user
claude plugin marketplace add IchenDEV/agent-plugin-mkt
claude plugin marketplace update agent-plugin-marketplace
claude plugin install wstg-security-testing@agent-plugin-marketplace

Paste and run these commands in a terminal with Claude Code. They add and refresh the PluginsMP catalog, then install this plugin.

The installer fetches third-party code from the source repository shown on this page. This directory validates manifest structure and source location, but does not perform a security audit; review the manifest, components, and source before installing.

Get the source manually
git clone https://github.com/mqmalagris/agent-skills

Clone the source repository, then follow its setup instructions to add the plugin to a compatible client. The plugin root is skills/wstg-security-testing/.

Plugin files

skills/wstg-security-testing/
└── .claude-plugin/plugin.json

Plugin manifests1

skills/wstg-security-testing/.claude-plugin/plugin.json
{
  "name": "wstg-security-testing",
  "version": "0.2.0",
  "description": "Web application security testing via the OWASP Web Security Testing Guide (WSTG) — 12 categories, ~109 test cases. Four modes: guide a pentest, self-review your app, build/score a coverage checklist, review a diff against WSTG. Methodology from OWASP/wstg. Authorized/defensive use only.",
  "author": {
    "name": "Matheus Malagris",
    "url": "https://github.com/mqmalagris"
  },
  "homepage": "https://github.com/mqmalagris/agent-skills/tree/main/skills/wstg-security-testing",
  "repository": "https://github.com/mqmalagris/agent-skills",
  "license": "MIT",
  "keywords": [
    "owasp",
    "wstg",
    "security-testing",
    "pentest",
    "appsec",
    "web-security",
    "code-review",
    "security"
  ]
}

For maintainers

If you maintain this plugin, link to this source-backed listing from your README so users can review its manifest and indexed components.

[wstg-security-testing on Agent Plugins Marketplace](https://pluginsmp.com/plugins/wstg-security-testing)