owasp-security

Secure code review for web applications involves systematically evaluating authentication, access control, and input validation against OWASP standards. This skill provides detailed checklists to identify configuration issues and ensure compliance with industry best practices.

The OWASP Top 10 checklist for API security covers input handling, data protection, and error handling to prevent common vulnerabilities. It guides reviews against ASVS and AI security risks to ensure comprehensive coverage of configuration flaws.

Auditing authentication and session management with OWASP ASVS standards requires evaluating password hashing and session controls. This skill applies these security standards to systematically review authentication modules and identify vulnerabilities.

This security review approach covers AI agent safety and access control flaws by applying OWASP standards to identify agent security risks. It evaluates input validation and access control configurations to mitigate web application vulnerabilities.

Identifying secure coding patterns and configuration issues requires applying a detailed code review checklist for data protection and error handling. This skill helps systematically evaluate security controls to ensure compliance with OWASP best practices.