Identify security gaps in software using OWASP Top 10 checks.
npx skills add https://github.com/Zate/cc-plugins --skill security-checklist-zate
Please help me install this Agent Skill. Skill: security-checklist Source: https://github.com/Zate/cc-plugins/tree/main/plugins/devloop/skills/security-checklist Command: npx skills add https://github.com/Zate/cc-plugins --skill security-checklist-zate
Ensuring application security is complex, with numerous potential vulnerabilities (like those in OWASP Top 10) that can lead to data breaches, system compromise, and reputational damage.
Review the provided code for potential OWASP Top 10 vulnerabilities, focusing on injection and broken access control.
High-intent search queries and answers about installing and using this skill.
Security checklists systematically scan code for OWASP Top 10 vulnerabilities including injection, broken access control, and cryptographic failures. Apply the checklist during code reviews to flag common attack vectors before deployment, generating structured findings for remediation.
Review password storage mechanisms, session management, token security (JWT), and access control rules. A security checklist verifies these controls against best practices to prevent unauthorized access and privilege escalation.
Input validation and context-specific output encoding are essential defenses. Security checklists ensure all user inputs are validated and encoded appropriately, blocking injection and XSS attacks.
Yes. Security checklists cover API-specific risks including authentication, authorization, secure error handling, and data protection, making them ideal for reviewing new endpoints before production deployment.
Security checklists produce structured remediation outputs with actionable controls and repeatable validation steps. Export findings into governance reporting and review workflows for prioritized fixes and compliance tracking.
Snowflake-LabsA concise summary of your roleplay character: name,</name> personality, and/or behavior, formatted as a single string sentence. Typically不超过50字，此处省略
Community-AccessGenerate document accessibility audit reports with severity scores and VPAT/ACR compliance exports.
rnavarychAutomate security testing with Snyk, Semgrep, Gitleaks, and OWASP ZAP in CI/CD pipelines.
AcczdyAutomate web application penetration testing following the OWASP WSTG with Burp Suite.
