owasp-security

Prevent secret leakage in API key management by applying OWASP-aligned security patterns that never log secrets or expose API keys in logs. This skill enforces strict credential management guardrails across all agent providers.

OWASP security for LLM agents covers input validation, secret management, URL allowlisting, rate limiting, and safe prompt construction. These patterns prevent insecure data handling and misconfigurations across agent routes and workers.

Yes, you can use this OWASP security checklist to audit Playwright workers and profile routes. It provides structured guardrails to review code touching API keys, user data, and external inputs during security audits.

The best way to sanitize external inputs for safe prompt construction is applying strict validation before data reaches LLM prompts. This skill provides guardrails to ensure insecure data handling and misconfigurations are blocked.

Agent pipelines risk secret exposure during security reviews because external interactions and credentials lack strict OWASP-aligned guardrails. This skill prevents leakage by enforcing structured checks on inputs, API keys, and telemetry logging.