Audit Kotlin and Ktor microservices against OWASP Top 10 2025 security principles.
npx skills add https://github.com/agnaldo4j/kanban-vision-api-kt --skill owasp-agnaldo4j
Please help me install this Agent Skill. Skill: owasp Source: https://github.com/agnaldo4j/kanban-vision-api-kt/tree/main/.claude/skills/owasp Command: npx skills add https://github.com/agnaldo4j/kanban-vision-api-kt --skill owasp-agnaldo4j
This Skill addresses critical security vulnerabilities in Kotlin/Ktor applications by providing actionable, project-specific guidance based on the OWASP Top 10 (2025) framework.
Use the owasp skill to audit the current implementation of the board management module for potential access control vulnerabilities.
High-intent search queries and answers about installing and using this skill.
To secure a Ktor API against OWASP Top 10 vulnerabilities, enforce JWT validation, implement parameterized queries via Exposed, and apply robust exception handling to protect authentication, authorization, and data integrity workflows.
Preventing IDOR and access control vulnerabilities in Kotlin microservices requires auditing routes and authorization logic against secure design patterns to identify and remediate insecure direct object reference risks.
Secure JWT validation and authentication in Ktor require applying standardized cryptographic configurations and input validation patterns to ensure tokens are properly verified and vulnerabilities are mitigated.
Compliance auditing for SQL injection risks in Kotlin is supported by reviewing database queries against industry-standard security patterns, specifically enforcing parameterized queries via the Exposed framework.
You need to audit logging workflows for secure design in Ktor applications when implementing new features, ensuring your code prevents common risks like insecure cryptographic configurations and complies with OWASP standards.
ar4mirezGuide Ktor backend service development with routing, serialization, and authentication patterns.
stayconnectquickMonitor live applications for console errors, performance regressions, and page failures.
baselakkad585-makerSecure REST, GraphQL, and WebSocket APIs with authentication, validation, and rate limiting.
armanzeroeightScan codebases for security vulnerabilities and identify CVE patterns.
