security-analysis

Apply the OWASP Top 10 (2021) checklist to identify and remediate code vulnerabilities.

Updated Feb 11, 2026

Search Tags:#security #vulnerability #owasp #code-review #cwe #threat-assessment

Ready to run

npx skills add https://github.com/knguyen0125/claude-plugin --skill security-analysis-knguyen0125

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-analysis
Source: https://github.com/knguyen0125/claude-plugin/tree/main/plugins/engineering/skills/security-analysis
Command: npx skills add https://github.com/knguyen0125/claude-plugin --skill security-analysis-knguyen0125

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

The Skill enables structured, end-to-end security reviews of codebases by applying the OWASP Top 10 (2021) checklist and mapping findings to CWE identifiers to drive actionable remediation.

Core Features & Use Cases

Structured OWASP category walkthrough ensuring no category is skipped.
Trivy integration for automatic detection of vulnerable dependencies, secrets, and misconfigurations.
Remediation guidance with concrete CWE mappings and severity-scored findings for PRs, audits, and pre-release checks.
Use Case: When reviewing a PR, run the checklist to surface category-specific issues and generate an action plan.

Quick Start

Run an end-to-end OWASP checklist on the target codebase and produce a prioritized remediation report.

Frequently Asked Questions about security-analysis

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I run an OWASP Top 10 security audit on my codebase?▼

Run an end-to-end OWASP Top 10 (2021) security audit on your codebase to systematically identify vulnerabilities, map findings to CWE identifiers, and generate a prioritized remediation report.

Can I use this for security code reviews on mobile and backend applications?▼

Yes, you can use this structured security code review process for web, mobile, and backend applications, ensuring all 10 OWASP categories are covered during pull requests and pre-release assessments.

How do I map code vulnerabilities to CWE identifiers during a security review?▼

Map code vulnerabilities to CWE identifiers by applying a structured OWASP Top 10 checklist that surfaces category-specific issues and includes concrete remediation steps with severity scoring.

Does this security analysis integrate with Trivy for dependency scanning?▼

Yes, this security analysis integrates with Trivy to automatically detect vulnerable dependencies, secrets, and misconfigurations while walking through the OWASP checklist.

What is the best way to generate a remediation plan for a pull request security check?▼

Generate a remediation plan for a pull request security check by running the structured OWASP checklist to surface category-specific issues and output an actionable plan with severity-scored findings.

Are there limitations to using an OWASP 2021 checklist for threat assessment?▼

The primary limitation of using the OWASP 2021 checklist for threat assessment is that it focuses on the top 10 vulnerability categories and may not cover niche or emerging threats outside this scope.