owasp-top-10

Scan HTTP services for OWASP Top 10 vulnerabilities and provide mitigations.

Updated Jun 5, 2026

Search Tags:#secure coding #vulnerability assessment #web security #OWASP Top 10 #web application security

Ready to run

npx skills add https://github.com/hung-phan/system-skills --skill owasp-top-10-hung-phan

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: owasp-top-10
Source: https://github.com/hung-phan/system-skills/tree/main/skills/system-review/references/security/owasp-top-10
Command: npx skills add https://github.com/hung-phan/system-skills --skill owasp-top-10-hung-phan

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides a comprehensive checklist to identify and mitigate the most common web application vulnerabilities, based on the OWASP Top 10 standard.

Core Features & Use Cases

Identify Vulnerabilities: Scan for the OWASP Top 10 vulnerabilities (broken access control, cryptographic failures, injection, etc.) in your web application.
Mitigation Guidance: Offer detailed explanations and code examples for each vulnerability, along with recommended mitigations.
Use Case: Before deploying a new web application, use this Skill to perform a pre-launch security review and ensure all common vulnerabilities are addressed.

Quick Start

Use the owasp-top-10 skill to scan your web application for common vulnerabilities.

Frequently Asked Questions about owasp-top-10

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I scan my web application for OWASP Top 10 vulnerabilities before deployment?▼

To scan for OWASP Top 10 vulnerabilities, this skill analyzes your application code and HTTP service behavior to identify common security flaws like broken access control, cryptographic failures, and injection vulnerabilities, providing mitigation strategies.

What is the best way to check my web app for broken access control and injection flaws?▼

The best way to check for broken access control and injection flaws is using a security checklist that scans application behavior against the OWASP Top 10 standard, offering detailed explanations and code examples for mitigation.

Can I use this vulnerability assessment on any HTTP service?▼

Yes, this vulnerability assessment targets HTTP services by analyzing application code and behavior to detect common web application security flaws defined in the OWASP Top 10, making it suitable for pre-launch security reviews.

How do I get mitigation guidance for cryptographic failures in my web application?▼

To get mitigation guidance for cryptographic failures, the skill scans your web application for these OWASP Top 10 vulnerabilities and provides detailed explanations alongside recommended code-level mitigations to secure your HTTP services.

Does this security review require any specific dependencies or setup?▼

No specific dependencies are required to run this security review, as the skill operates independently to analyze application code and behavior for web application security flaws based on the OWASP Top 10 checklist.