skills.rest
nhahoang1909
nhahoang1909COMMUNITY
Explore all skills by this author →
GitHub

security-checks

Apply OWASP Top 10 and CWE checks to identify security weaknesses.

Updated Apr 24, 2026
Search Tags:#security#owasp#vulnerabilities#code-review#security-audit#cwe
One-click install
npx skills add https://github.com/nhahoang1909/MarketNest --skill security-checks-nhahoang1909
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-checks
Source: https://github.com/nhahoang1909/MarketNest/tree/main/.claude/skills/security-checks
Command: npx skills add https://github.com/nhahoang1909/MarketNest --skill security-checks-nhahoang1909

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Detect and remediate security weaknesses in codebases by applying OWASP Top 10 and CWE checks across the repository, enabling safer software with actionable guidance.

Core Features & Use Cases

  • Comprehensive security checks aligned with OWASP Top 10 and CWE standards across code, configs, and dependencies.
  • Structured reporting with prioritized fixes, evidence, and reproducible steps for remediation.
  • Safe, defensive guidance for defensive security reviews, code audits, and pentest readiness.

Quick Start

Run an end-to-end security scan on the repository and generate a prioritized remediation plan.

Frequently Asked Questions about security-checks

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run an OWASP Top 10 security audit on my codebase?▼

Run an end-to-end security scan to apply OWASP Top 10 and CWE checks across your code, configs, and dependencies, generating a structured report with prioritized remediations and concrete fixes.

Can I perform security checks across both monoliths and microservices?▼

Yes, security checks apply to both monoliths and microservices across multiple languages and CI pipelines, ensuring consistent vulnerability detection and structured findings regardless of your architecture.

What is the best way to identify and fix CWE vulnerabilities in code?▼

The best way to identify CWE vulnerabilities is applying structured security checks that document findings, provide evidence, and offer prioritized remediations with reproducible test steps for defensive code reviews.

Does this security review provide actionable steps for pentest readiness?▼

Yes, it ensures pentest readiness by providing safe, defensive guidance with structured reporting, prioritized fixes, and reproducible remediation steps to resolve visible security weaknesses.

How do I get reproducible results when scanning for security weaknesses?▼

Reproducible security scan results are achieved by documenting applied checks and offering concrete fixes and test steps, ensuring consistent vulnerability identification and remediation across multiple runs.

What limitations exist when detecting critical security gaps in a repository?▼

This approach focuses on identifying critical and visible security weaknesses in a project, meaning it targets defensive code audits and may not detect obscure logical flaws hidden deep within complex custom business logic.

Related Skills

Explore More Software Engineering Skills→
cyperx84cyperx84
2

Vulnerability Detection

Scan source code, dependencies, and infrastructure for security vulnerabilities.

Community
Advanced
mzniumzniu
7

tech_evaluation

Assess technology readiness, scalability, security, and architectural risks in a structured report.

Community
Advanced
LuisSambranoLuisSambrano
7

code-review

Perform systematic code review and static analysis across multiple programming languages.

Community
Advanced
potatsukkipotatsukki

security-audit

Identify and fix security vulnerabilities in the RMV System via ethical hacking.

Community
Advanced