Identify and mitigate web application security risks with OWASP-aligned reviews.
npx skills add https://github.com/SylphxAI/flow --skill security-sylphxai
Please help me install this Agent Skill. Skill: security Source: https://github.com/SylphxAI/flow/tree/main/.claude/skills/security Command: npx skills add https://github.com/SylphxAI/flow --skill security-sylphxai
Application security is foundational; this Skill provides a structured approach to identifying and mitigating vulnerabilities, leakage of secrets, and weak configurations before they are exploited.
Example: sylphx-flow security audit --project ./my-app --output results.json
High-intent search queries and answers about installing and using this skill.
Web application vulnerability identification uses structured reviews aligned with OWASP Top 10 standards to detect risks in authentication, authorization, input validation, and secret management. This Skill applies OWASP-based assessment across modern frameworks and cloud deployments, flagging issues like weak MFA, hardcoded secrets, missing CSP, and CSRF gaps before exploitation.
Secure configuration enforcement includes Content Security Policy (CSP), HTTP Strict Transport Security (HSTS), CSRF protection, MFA for admin roles, fail-fast input validation, and prevention of hardcoded secrets. These non-negotiables are checked systematically across authentication, authorization, and configuration layers.
Yes. Structured OWASP-aligned reviews identify leakage of secrets, weak configurations, and security risks across modern frameworks and cloud deployments. The audit covers authentication, authorization, input validation, secret management, and secure configuration with fail-fast validation and anti-hardcoding enforcement.
MFA recommendations and secrets management guidance are provided as part of structured security assessment. The Skill enforces MFA for admin roles, prevents hardcoded secrets, and delivers configuration recommendations aligned with OWASP safeguards for modern frameworks and cloud environments.
OWASP-aligned security assessment applies across modern frameworks and cloud deployments, covering authentication, authorization, input validation, secret management, and secure configuration. The approach is framework-agnostic and works with contemporary web application architectures.
Fail-fast input validation prevents malformed or malicious data from propagating into application logic, reducing attack surface. This Skill enforces fail-fast validation as a non-negotiable control within its structured OWASP-aligned security reviews to catch issues early.
Vinix24Analyze source code, dependencies, and configurations to identify vulnerabilities and recommend mitigations.
SylphxAIApply OWASP-aligned security practices to web applications.
ValyntAutomate security validation of the ValueOS codebase with SAST, DAST, and secret scanning.
Logos-LiberIdentifies security vulnerabilities in code, dependencies, and container images.
