skills.rest
Th4nat0s
Th4nat0sCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

owasp-security

Review code against OWASP Top 10 and ASVS security standards.

107|40|Updated Dec 2, 2012
Search Tags:#code review#security#authentication#vulnerability#owasp#llm security
One-click install
npx skills add https://github.com/Th4nat0s/Chall_Tools --skill owasp-security-th4nat0s
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: owasp-security
Source: https://github.com/Th4nat0s/Chall_Tools/tree/main/skills/security
Command: npx skills add https://github.com/Th4nat0s/Chall_Tools --skill owasp-security-th4nat0s

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill addresses the critical need for consistent, high-quality security oversight during software development, helping teams identify and mitigate vulnerabilities before they reach production.

Core Features & Use Cases

  • Comprehensive Security Checklist: Provides actionable guidance for the OWASP Top 10:2025, ASVS 5.0, and LLM/Agentic AI security standards.
  • Secure Coding Patterns: Offers verified, safe implementation examples for common tasks like SQL queries, password hashing, and input validation across multiple programming languages.
  • Use Case: When building a new authentication module, use this Skill to verify that your session management, password storage, and access control logic align with current industry security benchmarks.

Quick Start

Apply the owasp-security skill to review the current authentication module for potential vulnerabilities and suggest secure implementation patterns.

Frequently Asked Questions about owasp-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check my web application for OWASP vulnerabilities during code review?▼

To secure LLM AI agents from prompt injection, apply security guidance targeting LLM-specific risks. This identifies vulnerabilities related to prompt injection and excessive agency, ensuring adherence to secure design patterns and mitigation strategies for agentic systems.

Can I get secure coding patterns for password hashing and SQL queries across multiple programming languages?▼

Yes, you can verify authentication module security for session management and access control. It checks your logic against current industry security benchmarks to ensure password storage and access controls align with secure design patterns.

What is the best way to ensure my code adheres to OWASP authentication and access control standards?▼

To mitigate excessive agency in AI agent systems, apply security guidance that targets LLM-specific risks. This enforces secure design patterns and mitigation strategies to prevent AI agents from performing unauthorized or overly broad actions.

Does this security review process support identifying prompt injection vulnerabilities in LLM applications?▼

Yes, the security review process supports identifying prompt injection vulnerabilities in LLM applications. It provides mitigation strategies for LLM-specific risks like prompt injection and excessive agency to secure AI agent systems effectively.

Related Skills

Explore More Software Engineering Skills→
phuonghxphuonghx
1

vulnerability-scanner

Scan source code, configuration files, and dependencies for security vulnerabilities.

Community
Advanced
giosuetedeschi-specgiosuetedeschi-spec

Burp Suite Web Application Testing

Intercept and modify HTTP traffic to test web application security.

Community
Advanced
LuisSambranoLuisSambrano
7

code-review

Perform systematic code review and static analysis across multiple programming languages.

Community
Advanced
RedHatProductSecurityRedHatProductSecurity
47

compiler-hardening

Apply compiler hardening flags and sanitizers to C/C++ build configurations.

Official
Advanced