explain

Explain security concepts, frameworks, and vulnerability findings with remediation guidance.

12|1|Updated Feb 9, 2026
One-click install
npx skills add https://github.com/florianbuetow/claude-code --skill explain-florianbuetow
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: explain
Source: https://github.com/florianbuetow/claude-code/tree/main/plugins/appsec/skills/explain
Command: npx skills add https://github.com/florianbuetow/claude-code --skill explain-florianbuetow

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill clarifies complex security concepts, frameworks, and specific vulnerability findings, making security knowledge accessible and actionable for developers.

Core Features & Use Cases

  • Concept Explanation: Provides clear definitions and context for security terminology, frameworks (like STRIDE, OWASP), and vulnerability categories.
  • Finding Analysis: Explains the meaning, impact, and remediation steps for specific security findings.
  • Use Case: A developer encounters a security finding like "INJ-003" and uses this Skill to understand what SQL injection is, how it's exploited, and how to fix it with code examples.

Quick Start

Use the explain skill to explain the OWASP Top 10 security framework.

Frequently Asked Questions about explain

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
What do specific security vulnerability findings mean and how do I fix them?

Security vulnerability findings like "INJ-003" are explained by breaking down the underlying concept, such as SQL injection, detailing how it is exploited, and providing actionable remediation guidance with concrete code examples.

How do I explain the OWASP Top 10 security framework to my development team?

The OWASP Top 10 security framework is explained by providing clear definitions and context for security terminology, vulnerability categories, and specific findings to make application security knowledge accessible and actionable for developers.

What is the best way to understand security terminology and threat modeling frameworks?

Understanding security terminology and threat modeling frameworks is best achieved by requesting explanations of specific concepts like STRIDE or OWASP, which clarifies definitions, context, and cross-framework comparisons.

Can I get code examples for fixing vulnerabilities identified during codebase analysis?

Code examples for fixing vulnerabilities are provided by leveraging codebase analysis to generate concrete examples, actionable insights, and specific remediation steps for identified security findings.

How does cross-framework comparison work for security vulnerability categories?

Cross-framework comparison for security vulnerability categories works by addressing user queries regarding different security terminology and frameworks, explaining the distinctions and context across multiple threat modeling approaches.