claude-code-owasp
OWASP security reviews, checklists, and secure coding patterns
All Skills in This Repository (1)
Pure Emerald Level IndicatorsFrequently Asked Questions
FAQPage SchemaHow to install claude-code-owasp?โผ
Run `npx skills add agamm/claude-code-owasp --all -g -y` in your terminal to install the skill globally for all your projects.
What does the OWASP security skill check for?โผ
It checks code against the OWASP Top 10:2025, ASVS 5.0, the LLM Top 10 (2025), and the Agentic AI security list (2026), covering injection, broken access control, authentication flaws, and more.
How does it reduce false positive security findings?โผ
It requires confirming that input is attacker-controlled, that the dangerous sink is actually reachable, and what the real blast radius is before reporting any vulnerability.
Which programming languages are covered?โผ
It includes security quirks and unsafe/safe code examples for over 20 languages, including Python, JavaScript, Java, C#, Go, Rust, PHP, and Ruby.
Can it review AI and LLM applications for security risks?โผ
Yes. It covers the OWASP LLM Top 10 and Agentic AI risks such as prompt injection, excessive agency, tool misuse, and memory poisoning.
Related Repositories in Software Engineering
View All in Software Engineeringโopenclaw
Run a personal AI assistant across your devices and chat apps
superpowers
Gives coding agents a disciplined workflow from idea to merged code
react
AI agent skills for building, testing, and porting React core