owasp-security-check

Audit web applications and REST APIs for OWASP Top 10 vulnerabilities.

93|9|Updated Jan 27, 2026
One-click install
npx skills add https://github.com/sergiodxa/agent-skills --skill owasp-security-check
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: owasp-security-check
Source: https://github.com/sergiodxa/agent-skills/tree/main/skills/owasp-security-check
Command: npx skills add https://github.com/sergiodxa/agent-skills --skill owasp-security-check

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps identify and remediate common web application and API security vulnerabilities, ensuring your code is robust against attacks.

Core Features & Use Cases

  • Comprehensive Audits: Covers OWASP Top 10 and common web security best practices.
  • Prioritized Rules: Guides you through checks from CRITICAL to MEDIUM severity.
  • Remediation Examples: Provides code snippets for fixing identified issues.
  • Use Case: Before deploying a new feature that handles user data, run this Skill to audit the code for potential vulnerabilities like broken access control or injection flaws.

Quick Start

Use the owasp-security-check skill to audit the codebase located at '/app/src' for critical vulnerabilities.

Frequently Asked Questions about owasp-security-check

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit web applications for OWASP Top 10 vulnerabilities?

You audit web applications for OWASP Top 10 vulnerabilities by applying security guidelines that check code for injection flaws, broken access control, and authentication issues. This skill provides prioritized rules from CRITICAL to MEDIUM severity to identify and remediate these common risks.

What is the best way to check code for API security vulnerabilities before deployment?

The best way to check code for API security vulnerabilities before deployment is to run a pre-production assessment using web security best practices. This skill audits REST APIs against the OWASP Top 10 to identify risks and provides code snippets for fixing them.

Can I review authentication and authorization logic using OWASP guidelines?

Yes, you can review authentication and authorization logic using OWASP guidelines. This skill specifically checks code for vulnerabilities related to broken access control and authentication failures, prioritizing issues from CRITICAL to MEDIUM severity with remediation examples.

Does this OWASP security check provide code examples for fixing injection flaws?

Yes, this OWASP security check provides code examples for fixing injection flaws. It includes detailed rules and remediation code snippets across various security categories to help fix identified vulnerabilities in your web applications and REST APIs.

What severity levels are covered when auditing REST APIs for vulnerabilities?

When auditing REST APIs for vulnerabilities, severity levels covered range from CRITICAL to MEDIUM. The skill guides you through prioritized security checks based on the OWASP Top 10 to ensure robust remediation of web application security risks.