security

Audit Astro 6 and Strapi v5 projects for OWASP Top 10 vulnerabilities.

Updated Apr 10, 2026
One-click install
npx skills add https://github.com/Kosmio/skeleton-test --skill security-kosmio
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security
Source: https://github.com/Kosmio/skeleton-test/tree/main/.claude/skills/security
Command: npx skills add https://github.com/Kosmio/skeleton-test --skill security-kosmio

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Audits the web project for security vulnerabilities and returns a prioritized report with actionable fixes, covering OWASP Top 10, headers, input validation, dependencies, secrets, CORS, rate limiting, and framework-specific patterns.

Core Features & Use Cases

  • Automated vulnerability discovery across Strapi backend and Astro frontend
  • Severity-ranked reporting with remediation guidance
  • Runtime, code, and dependency hygiene checks for Strapi v5 and Astro 6 projects
  • Use cases include securing authentication flows, preventing data leaks, and hardening deployments

Quick Start

Run the security audit against your local or remote environment to generate a prioritized risk report.

Frequently Asked Questions about security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit an Astro and Strapi project for OWASP Top 10 vulnerabilities?

You can audit web security risks by scanning multiple runtime environments to discover API endpoints, auth flows, and forms. The audit produces a structured, fix-oriented report with severity rankings and remediation guidance for OWASP Top 10 exposures.

What is the best way to check security headers and CORS in a web app?

The best way to check security headers and CORS is to run an automated vulnerability discovery scan. This process reviews your security headers, CORS configurations, and input validation, returning a prioritized report to help harden your web application deployments.

Can I scan for dependency hygiene and exposed secrets in my Astro frontend?

Yes, you can scan for dependency hygiene and exposed secrets in an Astro frontend. The audit process reviews dependencies and secrets handling, enforcing input validation across both Astro and Strapi to prevent data leaks and secure authentication flows.

How does a web security audit handle rate limiting and external integrations?

A web security audit handles rate limiting and external integrations by discovering these flows during the runtime and code analysis. It evaluates project-specific exposure, applying input validation checks to produce actionable findings for hardening your deployment.

Does the security audit generate remediation guidance for Strapi v5 backend risks?

Yes, the security audit generates remediation guidance for Strapi v5 backend risks. It performs automated vulnerability discovery across the backend, checks dependency hygiene, and outputs a severity-ranked report to secure authentication flows and prevent data leaks.