skills.rest
knguyen0125
knguyen0125COMMUNITY
Explore all skills by this author →
GitHub

security-analysis

Apply the OWASP Top 10 (2021) checklist to identify and remediate code vulnerabilities.

Updated Feb 11, 2026
Search Tags:#security#vulnerability#owasp#code-review#cwe#threat-assessment
One-click install
npx skills add https://github.com/knguyen0125/claude-plugin --skill security-analysis-knguyen0125
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-analysis
Source: https://github.com/knguyen0125/claude-plugin/tree/main/plugins/engineering/skills/security-analysis
Command: npx skills add https://github.com/knguyen0125/claude-plugin --skill security-analysis-knguyen0125

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

The Skill enables structured, end-to-end security reviews of codebases by applying the OWASP Top 10 (2021) checklist and mapping findings to CWE identifiers to drive actionable remediation.

Core Features & Use Cases

  • Structured OWASP category walkthrough ensuring no category is skipped.
  • Trivy integration for automatic detection of vulnerable dependencies, secrets, and misconfigurations.
  • Remediation guidance with concrete CWE mappings and severity-scored findings for PRs, audits, and pre-release checks.
  • Use Case: When reviewing a PR, run the checklist to surface category-specific issues and generate an action plan.

Quick Start

Run an end-to-end OWASP checklist on the target codebase and produce a prioritized remediation report.

Frequently Asked Questions about security-analysis

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run an OWASP Top 10 security audit on my codebase?▼

Run an end-to-end OWASP Top 10 (2021) security audit on your codebase to systematically identify vulnerabilities, map findings to CWE identifiers, and generate a prioritized remediation report.

Can I use this for security code reviews on mobile and backend applications?▼

Yes, you can use this structured security code review process for web, mobile, and backend applications, ensuring all 10 OWASP categories are covered during pull requests and pre-release assessments.

How do I map code vulnerabilities to CWE identifiers during a security review?▼

Map code vulnerabilities to CWE identifiers by applying a structured OWASP Top 10 checklist that surfaces category-specific issues and includes concrete remediation steps with severity scoring.

Does this security analysis integrate with Trivy for dependency scanning?▼

Yes, this security analysis integrates with Trivy to automatically detect vulnerable dependencies, secrets, and misconfigurations while walking through the OWASP checklist.

What is the best way to generate a remediation plan for a pull request security check?▼

Generate a remediation plan for a pull request security check by running the structured OWASP checklist to surface category-specific issues and output an actionable plan with severity-scored findings.

Are there limitations to using an OWASP 2021 checklist for threat assessment?▼

The primary limitation of using the OWASP 2021 checklist for threat assessment is that it focuses on the top 10 vulnerability categories and may not cover niche or emerging threats outside this scope.

Related Skills

Explore More Software Engineering Skills→
Miosa-osaMiosa-osa
226

security-auditor

Identify and remediate security vulnerabilities across codebases and configurations.

Official
Advanced
marvinbissmarvinbiss

supabase-report-compare

Compare two Markdown security audit reports to track remediation progress and identify new vulnerabilities.

Community
Intermediate
jaskaranhundaljaskaranhundal
3

appsec-code-review

Analyze code changes for OWASP Top 10 vulnerabilities and dependency risks.

Community
Advanced
kivo360kivo360
1

moai-domain-security

Mitigate security vulnerabilities in CI/CD pipelines using OWASP Top 10 and SAST/DAST workflows.

Community
Advanced