security

Name: security
Availability: InStock
Author: Sylphx

Identify and mitigate web application security risks with OWASP-aligned reviews.

4|2|Updated Sep 17, 2025

Search Tags:#OWASP #security #secrets #vulnerabilities #MFA #secure-development

Ready to run

npx skills add https://github.com/SylphxAI/flow --skill security-sylphxai

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security
Source: https://github.com/SylphxAI/flow/tree/main/.claude/skills/security
Command: npx skills add https://github.com/SylphxAI/flow --skill security-sylphxai

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Application security is foundational; this Skill provides a structured approach to identifying and mitigating vulnerabilities, leakage of secrets, and weak configurations before they are exploited.

Core Features & Use Cases

OWASP Top 10–based security assessment and remediation guidance.
Secure configuration enforcement including CSP, HSTS, and anti-CSRF measures.
Secrets management and MFA recommendations with fail-fast checks.

Quick Start

Example: sylphx-flow security audit --project ./my-app --output results.json

Frequently Asked Questions about security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I identify and fix web application vulnerabilities in my code?▼

Web application vulnerability identification uses structured reviews aligned with OWASP Top 10 standards to detect risks in authentication, authorization, input validation, and secret management. This Skill applies OWASP-based assessment across modern frameworks and cloud deployments, flagging issues like weak MFA, hardcoded secrets, missing CSP, and CSRF gaps before exploitation.

What security checks should I enforce before deployment?▼

Secure configuration enforcement includes Content Security Policy (CSP), HTTP Strict Transport Security (HSTS), CSRF protection, MFA for admin roles, fail-fast input validation, and prevention of hardcoded secrets. These non-negotiables are checked systematically across authentication, authorization, and configuration layers.

Can I audit my application for secrets and misconfigurations?▼

Yes. Structured OWASP-aligned reviews identify leakage of secrets, weak configurations, and security risks across modern frameworks and cloud deployments. The audit covers authentication, authorization, input validation, secret management, and secure configuration with fail-fast validation and anti-hardcoding enforcement.

How do I implement MFA and secure secret management in my application?▼

MFA recommendations and secrets management guidance are provided as part of structured security assessment. The Skill enforces MFA for admin roles, prevents hardcoded secrets, and delivers configuration recommendations aligned with OWASP safeguards for modern frameworks and cloud environments.

What frameworks and cloud platforms does security assessment cover?▼

OWASP-aligned security assessment applies across modern frameworks and cloud deployments, covering authentication, authorization, input validation, secret management, and secure configuration. The approach is framework-agnostic and works with contemporary web application architectures.

Why is fail-fast validation important for application security?▼

Fail-fast input validation prevents malformed or malicious data from propagating into application logic, reducing attack surface. This Skill enforces fail-fast validation as a non-negotiable control within its structured OWASP-aligned security reviews to catch issues early.