israeli-appsec-scanner

Detect OWASP Top 10 vulnerabilities and PPA compliance gaps in Israeli web applications.

9|2|Updated Feb 23, 2026
One-click install
npx skills add https://github.com/skills-il/security-compliance --skill israeli-appsec-scanner
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: israeli-appsec-scanner
Source: https://github.com/skills-il/security-compliance/tree/main/israeli-appsec-scanner
Command: npx skills add https://github.com/skills-il/security-compliance --skill israeli-appsec-scanner

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

Provides a focused application-layer security and compliance audit tailored to Israeli web applications, removing uncertainty about OWASP vulnerabilities, secrets leakage, and local regulatory (PPA) obligations so teams can prioritize fixes and meet legal requirements.

Core Features & Use Cases

  • OWASP Top 10 checks adapted for Israeli deployments and Hebrew/RTL input vectors, including IDOR, injection, SSRF, and BiDi/Trojan Source detection.
  • Privacy & PPA compliance guidance covering database registration thresholds, breach notification practices, retention, and cross-border transfer considerations.
  • Automated scanning scripts and detection for dependencies, container images, and secrets using the included scripts and integrations with trivy, pnpm/pip-audit, trufflehog, and gitleaks.
  • Practical secure-coding patterns and RTL-specific mitigations such as Hebrew input normalization, homoglyph defenses, and URL/IDN handling.
  • Use Case: Security engineers at an Israeli startup can run the checklist to discover critical vulnerabilities, locate committed secrets, and produce a prioritized remediation plan for auditors or executives.

Quick Start

Run the Israeli AppSec Scanner on your project directory to identify OWASP Top 10 issues, PPA compliance gaps, leaked secrets, and produce a prioritized, machine-readable remediation report.

Frequently Asked Questions about israeli-appsec-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check my web application for Hebrew and RTL-specific security vulnerabilities?

OWASP Top 10 testing for Israeli web applications includes automated checks for injection, IDOR, and SSRF adapted for Hebrew/RTL input vectors. It also incorporates BiDi and Trojan Source detection to catch RTL-specific security vulnerabilities in your codebase.

How do I automate dependency and container scanning for my project?

Automate dependency and container scanning by running provided scripts that integrate with trivy and pnpm/pip-audit. This identifies vulnerable dependencies and container image flaws, generating machine-readable reports to help you prioritize and remediate security issues efficiently.

What is PPA compliance and how does it affect Israeli web applications?

PPA compliance for Israeli web applications involves meeting database registration thresholds, breach notification practices, and cross-border transfer rules. The scanner checks these privacy regulations to help teams identify compliance gaps and meet local legal requirements.

Can I use this scanner to detect committed secrets in my Git history?

Yes, you can detect committed secrets using integrated trufflehog and gitleaks scripts. The scanner runs automated secrets detection across your project to locate leaked credentials and sensitive data, providing prioritized findings for immediate remediation.

Does this security audit work with my existing CI pipelines?

Yes, the security audit works with CI pipelines by applying OWASP Top 10 testing, dependency scanning, and secrets detection to your web projects. It generates machine-readable reports with severity ratings and remediation guidance suitable for automated pipeline integration.

What is the best way to secure an Israeli web application against OWASP Top 10 risks?

The best way to secure an Israeli web application is combining OWASP Top 10 checks with PPA compliance validation and Hebrew/RTL-specific mitigations. This includes applying secure-coding patterns for homoglyph defenses and URL/IDN handling to produce a prioritized remediation plan.