laravel-owasp-security

Audit Laravel applications against the OWASP Top 10 security categories.

1|Updated Mar 26, 2026
One-click install
npx skills add https://github.com/HubDigitalEPN/HubDigital --skill laravel-owasp-security
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: laravel-owasp-security
Source: https://github.com/HubDigitalEPN/HubDigital/tree/main/.ai/skills/laravel-owasp-security
Command: npx skills add https://github.com/HubDigitalEPN/HubDigital --skill laravel-owasp-security

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires laravel, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides a comprehensive OWASP Top 10 security audit for Laravel 13 + React/Inertia.js applications, ensuring compliance and identifying potential vulnerabilities.

Core Features & Use Cases

  • OWASP Top 10 Audit: Evaluates your codebase against all 10 categories of web vulnerabilities.
  • React/Inertia.js Security Checks: Adds additional checks specific to React and Inertia.js frameworks.
  • Use Case: Use this Skill to audit your Laravel app for security flaws, ensuring secure authentication, data handling, and overall app integrity.

Quick Start

Run the OWASP audit on your Laravel app by using the "audit OWASP" command.

Frequently Asked Questions about laravel-owasp-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run an OWASP Top 10 security audit on a Laravel application?

To run an OWASP Top 10 security audit on a Laravel application, use the audit command to evaluate your codebase against broken access control, cryptographic failures, injection, and other vulnerability categories. The audit checks Laravel code for compliance.

What security checks are needed for React and Inertia.js in a Laravel app?

Security checks for React and Inertia.js in a Laravel app target framework-specific vulnerabilities like cross-site scripting and data integrity failures. The audit applies OWASP guidelines to ensure secure data handling and authentication across the full stack.

Can I use this OWASP audit tool with Laravel 13 and React?

Yes, this OWASP audit tool works with Laravel 13 and React. It requires a Laravel environment and conducts comprehensive security checks tailored to the React and Inertia.js frontend integration to ensure overall application integrity.

Does the OWASP audit check for identification and authentication failures in Laravel?

Yes, the OWASP audit explicitly checks for identification and authentication failures in Laravel. It evaluates your codebase against all OWASP Top 10 categories, including cryptographic failures, security misconfigurations, and vulnerable components.

What is the best way to prevent server-side request forgery in Laravel?

The best way to prevent server-side request forgery in Laravel is to conduct an OWASP Top 10 security audit. This process identifies insecure design flaws and validates that your application architecture prevents SSRF and injection vulnerabilities.

What are the limitations of running a security audit on Laravel Inertia.js applications?

The audit requires prerequisite knowledge of Laravel and OWASP guidelines to interpret results effectively. It focuses on React and Inertia.js specific security concerns, meaning custom frontend frameworks outside this stack may not receive the same specialized vulnerability checks.