Teach security concepts like OWASP Top 10 using the user's codebase.
npx skills add https://github.com/florianbuetow/claude-code --skill learn-florianbuetow
Please help me install this Agent Skill. Skill: learn Source: https://github.com/florianbuetow/claude-code/tree/main/plugins/appsec/skills/learn Command: npx skills add https://github.com/florianbuetow/claude-code --skill learn-florianbuetow
This Skill provides an interactive and guided learning experience for security concepts, using the user's own codebase as a practical teaching tool.
Use the learn skill to teach me about OWASP security principles using my codebase.
High-intent search queries and answers about installing and using this skill.
You can learn OWASP Top 10 vulnerabilities using your codebase through an interactive walkthrough that explains security principles, shows relevant code examples, asks identifying questions, and discusses discovered risks.
The STRIDE threat modeling process is applied interactively through a guided four-step structure: explaining concepts, showing code patterns, prompting risk identification, and revealing findings within your codebase.
Red teaming concepts help you discover vulnerabilities in your code automatically by guiding you through a structured analysis of your codebase, prompting you to identify potential risks yourself during the walkthrough.
You do not need external subagents or dependencies to run a security analysis, as the interactive learning experience operates entirely within the main agent context using your codebase as a practical teaching tool.
Interactive security learning differs from standard code analysis tools by acting as a guided teaching experience rather than an automated scanner, explaining security concepts and prompting you to discover vulnerabilities in your code actively.
The limitation of using a conversational agent for vulnerability discovery is its reliance on a structured conversational flow of explaining, showing, asking, and revealing, which may not catch deeply nested or complex security flaws automatically.
joshftExplore codebases interactively with mermaid diagrams and prose walkthroughs.
outfitter-devAudit codebases for security vulnerabilities and misconfigurations using OWASP and CWE mappings.
daishimanGenerate standardized security diagnostic reports from vulnerability findings.
ozan-fnScan Golang code for vulnerabilities using govulncheck and golangci-lint.
