skills.rest
modu-ai
modu-aiOFFICIAL
Explore all skills by this author →
Website𝕏@MODU_AIGitHub

moai-domain-security

Provision isolated Git worktrees for parallel SPEC development.

1.2k|214|Updated Sep 16, 2025
Search Tags:#security#owasp#threat modeling#secrets#sast#dependency scan#vulnerabilities
One-click install
npx skills add https://github.com/modu-ai/moai-adk --skill moai-domain-security
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: moai-domain-security
Source: https://github.com/modu-ai/moai-adk/tree/main/.claude/skills/moai-domain-security
Command: npx skills add https://github.com/modu-ai/moai-adk --skill moai-domain-security

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires OWASP ZAP, Trivy, Bandit, and includes examples (resource) and references (resource) components.

What problem does it solve?

Security vulnerabilities are a constant threat in software development. This Skill provides comprehensive guidance on application security, covering OWASP Top 10, static/dynamic analysis, dependency security, and secrets management to help you build secure and resilient applications.

Core Features & Use Cases

  • OWASP Top 10 Compliance: Guides on preventing common web application vulnerabilities.
  • SAST/DAST Integration: Recommends and helps integrate Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) tools like Bandit and OWASP ZAP.
  • Dependency Security: Scans project dependencies for known vulnerabilities using tools like Trivy.
  • Secrets Management: Best practices for securely handling and storing sensitive information.
  • Use Case: Before deploying a new web application, this Skill can help you run a security audit, identify potential SQL injection or cross-site scripting (XSS) vulnerabilities, and suggest fixes based on OWASP guidelines.

Quick Start

Scan Python code for security issues with Bandit

bandit -r src/

Scan container image for vulnerabilities with Trivy

trivy image my-app:latest

Claude can interpret the results and suggest remediation.

Frequently Asked Questions about moai-domain-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my application for security vulnerabilities?▼

Security scanning identifies vulnerabilities in your code and dependencies. Use SAST tools like Bandit for Python code analysis, OWASP ZAP for dynamic testing, and Trivy for container image and dependency scanning. Claude can interpret results and suggest OWASP-aligned remediation steps.

What are the OWASP Top 10 and why should I care?▼

The OWASP Top 10 lists the most critical web application security risks, including injection attacks, broken authentication, and XSS. This Skill guides you through preventing these vulnerabilities in your application before deployment.

How do I check my project dependencies for known vulnerabilities?▼

Dependency scanning detects vulnerable libraries in your project. Trivy scans dependencies and container images for known CVEs. This Skill helps you integrate dependency scanning into your workflow and act on discovered vulnerabilities.

What's the difference between SAST and DAST, and which should I use?▼

SAST (Static Application Security Testing) analyzes source code without running it; DAST (Dynamic Application Security Testing) tests running applications. Both are complementary. This Skill recommends tools like Bandit for SAST and OWASP ZAP for DAST based on your needs.

How do I handle secrets and sensitive data securely in my code?▼

Secrets management protects API keys, credentials, and tokens from exposure. This Skill covers best practices for storing, rotating, and scanning for accidentally committed secrets in your codebase.

Can I integrate Bandit, OWASP ZAP, and Trivy into my development workflow?▼

Yes. This Skill guides integration of SAST, DAST, and dependency scanning tools into your CI/CD pipeline and local development, enabling continuous security audits before code reaches production.

Related Skills

Explore More Software Engineering Skills→
vuralserhat86vuralserhat86
43

secops_core

Automate security scanning and vulnerability assessment using Trivy, Snyk, ESLint, Bandit, and Semgrep.

Community
Advanced
ZateZate
9

audit-report

Generate structured security audit reports with findings, severity, and ASVS mappings.

Community
Advanced
cosmixcosmix
53

ci-cd

Design and automate CI/CD pipelines for GitHub Actions, GitLab CI, and Jenkins.

Community
Advanced
Logos-LiberLogos-Liber
17

vulnerability-scanning

Identifies security vulnerabilities in code, dependencies, and container images.

Official
Advanced