agammagammCommunityยท1 Agent Skills Included

claude-code-owasp

OWASP security reviews, checklists, and secure coding patterns

Reviews code for vulnerabilities using the latest OWASP Top 10:2025, ASVS 5.0, LLM, and agentic security standards. Cuts false positives by confirming attacker-controlled input, sink reachability, and blast radius before reporting findings. Provides per-language unsafe and safe code examples for over 20 languages to speed up secure development.
npx skills add agamm/claude-code-owasp --all -g -y

All Skills in This Repository (1)

Pure Emerald Level Indicators

Frequently Asked Questions

FAQPage Schema
How to install claude-code-owasp?โ–ผ

Run `npx skills add agamm/claude-code-owasp --all -g -y` in your terminal to install the skill globally for all your projects.

What does the OWASP security skill check for?โ–ผ

It checks code against the OWASP Top 10:2025, ASVS 5.0, the LLM Top 10 (2025), and the Agentic AI security list (2026), covering injection, broken access control, authentication flaws, and more.

How does it reduce false positive security findings?โ–ผ

It requires confirming that input is attacker-controlled, that the dangerous sink is actually reachable, and what the real blast radius is before reporting any vulnerability.

Which programming languages are covered?โ–ผ

It includes security quirks and unsafe/safe code examples for over 20 languages, including Python, JavaScript, Java, C#, Go, Rust, PHP, and Ruby.

Can it review AI and LLM applications for security risks?โ–ผ

Yes. It covers the OWASP LLM Top 10 and Agentic AI risks such as prompt injection, excessive agency, tool misuse, and memory poisoning.

Related Repositories in Software Engineering

View All in Software Engineeringโ†’