skills.rest
hung-phan
hung-phanCOMMUNITY
Explore all skills by this author →
GitHub

owasp-top-10

Scan HTTP services for OWASP Top 10 vulnerabilities and provide mitigations.

Updated Jun 5, 2026
Search Tags:#secure coding#vulnerability assessment#web security#OWASP Top 10#web application security
One-click install
npx skills add https://github.com/hung-phan/system-skills --skill owasp-top-10-hung-phan
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: owasp-top-10
Source: https://github.com/hung-phan/system-skills/tree/main/skills/system-review/references/security/owasp-top-10
Command: npx skills add https://github.com/hung-phan/system-skills --skill owasp-top-10-hung-phan

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides a comprehensive checklist to identify and mitigate the most common web application vulnerabilities, based on the OWASP Top 10 standard.

Core Features & Use Cases

  • Identify Vulnerabilities: Scan for the OWASP Top 10 vulnerabilities (broken access control, cryptographic failures, injection, etc.) in your web application.
  • Mitigation Guidance: Offer detailed explanations and code examples for each vulnerability, along with recommended mitigations.
  • Use Case: Before deploying a new web application, use this Skill to perform a pre-launch security review and ensure all common vulnerabilities are addressed.

Quick Start

Use the owasp-top-10 skill to scan your web application for common vulnerabilities.

Frequently Asked Questions about owasp-top-10

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my web application for OWASP Top 10 vulnerabilities before deployment?▼

To scan for OWASP Top 10 vulnerabilities, this skill analyzes your application code and HTTP service behavior to identify common security flaws like broken access control, cryptographic failures, and injection vulnerabilities, providing mitigation strategies.

What is the best way to check my web app for broken access control and injection flaws?▼

The best way to check for broken access control and injection flaws is using a security checklist that scans application behavior against the OWASP Top 10 standard, offering detailed explanations and code examples for mitigation.

Can I use this vulnerability assessment on any HTTP service?▼

Yes, this vulnerability assessment targets HTTP services by analyzing application code and behavior to detect common web application security flaws defined in the OWASP Top 10, making it suitable for pre-launch security reviews.

How do I get mitigation guidance for cryptographic failures in my web application?▼

To get mitigation guidance for cryptographic failures, the skill scans your web application for these OWASP Top 10 vulnerabilities and provides detailed explanations alongside recommended code-level mitigations to secure your HTTP services.

Does this security review require any specific dependencies or setup?▼

No specific dependencies are required to run this security review, as the skill operates independently to analyze application code and behavior for web application security flaws based on the OWASP Top 10 checklist.

Related Skills

Explore More Software Engineering Skills→
ArianHobson333ArianHobson333
7

reconnaissance

Identify subdomains, ports, endpoints, APIs, and attack surfaces.

Community
Advanced
CuriousLearnerCuriousLearner
27

auth-analyzer

Analyze authentication and authorization patterns for security vulnerabilities against OWASP Top 10 and NIST.

Community
Advanced
nanorepublicananorepublica
61

Global Tech Stack

Validate code against centralized global tech stack standards.

Community
Basic
BagelHoleBagelHole
46

dast-scanning

Perform DAST scans on web applications and APIs with OWASP ZAP.

Community
Intermediate