skills.rest
acardozzo
acardozzoCOMMUNITY
Explore all skills by this author →
GitHub

sec-rx

Scan source code for OWASP Top 10 vulnerabilities and map findings to ASVS and CWE references.

Updated Mar 15, 2026
Search Tags:#security#vulnerability#owasp#audit#code scan#secure code
One-click install
npx skills add https://github.com/acardozzo/rx-suite --skill sec-rx
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: sec-rx
Source: https://github.com/acardozzo/rx-suite/tree/main/skills/sec-rx
Command: npx skills add https://github.com/acardozzo/rx-suite --skill sec-rx

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill identifies and helps you fix critical security vulnerabilities directly within your source code, preventing breaches and protecting sensitive data.

Core Features & Use Cases

  • Vulnerability Scanning: Detects common security flaws like injection, authentication issues, and insecure configurations.
  • OWASP Top 10 Coverage: Maps findings to industry-standard security risks for clear understanding.
  • Use Case: Run a security audit on your web application's codebase before deployment to catch and fix vulnerabilities like SQL injection or cross-site scripting (XSS).

Quick Start

Run the sec-rx skill to scan the codebase located at /Users/user/projects/my-app.

Frequently Asked Questions about sec-rx

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan source code for OWASP Top 10 vulnerabilities?▼

To scan source code for OWASP Top 10 vulnerabilities, the Skill evaluates code-level security posture by inspecting source code patterns, dependencies, and security configurations, mapping findings to industry-standard security risks.

What is code-level security posture evaluation?▼

Code-level security posture evaluation is the process of detecting authentication flaws, injection vectors, authorization gaps, and data protection issues, mapping the discovered vulnerabilities to OWASP ASVS and CWE references.

How do I audit my web application codebase for SQL injection before deployment?▼

You can audit your web application codebase for SQL injection by running a security scan on your project directory to catch and help fix critical security vulnerabilities directly within the source code.

Does this security audit check dependencies and security configurations?▼

Yes, the security audit checks dependencies and security configurations alongside source code patterns to comprehensively identify injection vectors, authentication flaws, and insecure settings.

Can I map detected security flaws to CWE references?▼

Yes, you can map detected security flaws to CWE references because the evaluation maps findings to OWASP ASVS and CWE references for clear understanding and remediation tracking.

Related Skills

Explore More Software Engineering Skills→
BasharAmsoBasharAmso
1

Security Audit

Audit code and dependencies for security vulnerabilities and generate a severity-rated report.

Community
Advanced
a-jay85a-jay85

security-audit

Audit PHP code for SQL injection, XSS, CSRF, and authentication flaws.

Community
Intermediate
matteocervellimatteocervelli
25

security-scanner

Scan codebases for secrets, vulnerable dependencies, and insecure patterns.

Community
Advanced
SnailSploitSnailSploit
2.9k

graphql-security

Test GraphQL APIs for introspection abuse, injection, and authorization bypasses.

Community
Advanced