openwebf-security

Route security reviews to focused OpenWebF skills by trigger terms.

Updated Dec 17, 2025
One-click install
npx skills add https://github.com/archview-ai/webf-plugin --skill openwebf-security
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: openwebf-security
Source: https://github.com/archview-ai/webf-plugin/tree/main/webf-plugin/skills/openwebf-security
Command: npx skills add https://github.com/archview-ai/webf-plugin --skill openwebf-security

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Deprecated umbrella for cross-cutting security reviews; route to focused security skills for remote content, XSS sanitization, and store guidelines.

Core Features & Use Cases

  • Route to the most relevant focused security Skill based on trigger terms
  • Handle cross-cutting security concerns when repo context is missing

Quick Start

If this umbrella Skill is active, route to the most relevant focused security Skill based on trigger terms (e.g., “untrusted content”, “XSS”, “store guidelines”).

Frequently Asked Questions about openwebf-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I route security reviews for untrusted content and XSS vulnerabilities?

This Skill routes cross-cutting security reviews to focused OpenWebF security Skills based on trigger terms like untrusted content, XSS, and store compliance. It identifies the most relevant specialized Skill for your specific security concern without modifying repository files by default.

When should I use security routing for remote content assessment?

Use security routing when you're assessing remote content, performing XSS sanitization checks, or validating App Store and Play Store compliance across web apps and extensions. The Skill triages your concern to the appropriate focused security Skill.

Can I use this for App Store and Play Store compliance checks?

Yes. This Skill routes store compliance concerns—including App Store and Play Store guideline violations—to the most relevant focused security Skill, returning prioritized remediation guidance for your specific compliance scenario.

What happens after security routing completes?

After routing, you receive findings with prioritized remediation guidance from the focused security Skill. The original repository remains unmodified by default, allowing you to review and implement recommendations.

How does trigger-based routing work for XSS and sanitization concerns?

Trigger-based routing scans your query for terms like XSS, untrusted content, and sanitization. It matches these triggers to route your security concern to the most appropriate specialized Skill, ensuring domain-specific expertise addresses your issue.