skills.rest
Leavesfly
LeavesflyCOMMUNITY
Explore all skills by this author →
GitHub

security-checklist

Check Java applications against the OWASP Top 10 security checklist.

233|49|Updated Nov 4, 2025
Search Tags:#checklist#security#vulnerability#owasp#secure coding#code audit
One-click install
npx skills add https://github.com/Leavesfly/Jimi --skill security-checklist-leavesfly
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-checklist
Source: https://github.com/Leavesfly/Jimi/tree/main/src/main/resources/skills/security-checklist
Command: npx skills add https://github.com/Leavesfly/Jimi --skill security-checklist-leavesfly

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps developers identify and mitigate common security vulnerabilities in their applications by providing a comprehensive checklist based on the OWASP Top 10.

Core Features & Use Cases

  • OWASP Top 10 Coverage: Detailed explanations and protective measures for each category of the OWASP Top 10.
  • Code Examples: Practical Java code snippets demonstrating secure coding practices.
  • Tool Recommendations: Suggestions for tools to aid in security scanning and dependency checking.
  • Use Case: Before deploying a new feature, run this Skill to ensure adherence to security best practices, preventing common vulnerabilities like SQL injection or insecure configurations.

Quick Start

Run the security-scan.sh script to perform a security check on the source code.

Frequently Asked Questions about security-checklist

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check my Java application for OWASP Top 10 vulnerabilities?▼

To check Java applications for OWASP Top 10 vulnerabilities, run the security-scan.sh script to automate basic checks for sensitive information, SQL injection risks, and hardcoded URLs while providing protective measures.

What secure coding practices prevent SQL injection in Java?▼

Secure coding practices to prevent SQL injection involve following OWASP guidelines, using provided practical Java code snippets for secure implementation, and running automated checks to identify injection flaws in the source code.

Can I use this security checklist to find hardcoded URLs in my codebase?▼

Yes, you can use this security checklist to find hardcoded URLs. The automated security scan script specifically checks source code to identify hardcoded URLs, sensitive information exposure, and SQL injection risks.

What is the best way to identify access control failures before deployment?▼

The best way to identify access control failures is running a pre-deployment security scan using the OWASP Top 10 checklist to detect insecure configurations, injection flaws, and access control vulnerabilities.

Does this OWASP security check recommend tools for dependency scanning?▼

Yes, the OWASP security check recommends specific tools to aid in security scanning and dependency checking, helping developers identify and mitigate vulnerabilities like insecure configurations and access control failures.

Related Skills

Explore More Software Engineering Skills→
camoneartcamoneart
5

sast-configuration

Configure Semgrep, SonarQube, and CodeQL for automated vulnerability detection in CI/CD pipelines.

Community
Advanced
devendrapratapsinghdevendrapratapsingh
1

app-security

Scan application code for vulnerabilities and hardcoded secrets.

Community
Advanced
AgentientAgentient
2

owasp-code-analysis

Detect OWASP Top 10 2021 vulnerabilities in codebases and configurations.

Official
Basic
bugrabilgebugrabilge
10

vulnerability-scanner

Detect security vulnerabilities in code, running apps, and dependencies.

Community
Advanced