Assess vulnerabilities and review code against OWASP Top 10 standards.
npx skills add https://github.com/zangxin75/openclaw-skills --skill security-zangxin75
Please help me install this Agent Skill. Skill: security Source: https://github.com/zangxin75/openclaw-skills/tree/main/sw-security Command: npx skills add https://github.com/zangxin75/openclaw-skills --skill security-zangxin75
This Skill addresses the critical need for robust security in software development and system operations by providing expert guidance on vulnerability assessment, penetration testing, and secure code practices.
Use the security skill to perform an OWASP Top 10 analysis on the provided code.
High-intent search queries and answers about installing and using this skill.
To perform an OWASP Top 10 vulnerability assessment, you can use this skill to analyze your source code for common security flaws like injection vulnerabilities, broken access control, and authentication issues. It provides structured secure code review checklists and methodologies to identify weaknesses before deployment.
The best way to start threat modeling is through this skill's progressive disclosure analysis, which phases security architecture reviews to systematically identify threats. It evaluates authentication flows and access controls, ensuring core principles of single domain focus and severity-based fixes are applied to your design.
Yes, you can get penetration testing guidance to simulate attacks and uncover system weaknesses. This skill offers structured approaches for offensive security testing, helping you identify exploitable vulnerabilities and validate the effectiveness of your current security defenses.
You review code for broken access control and injection vulnerabilities by applying this skill's secure code review checklists to the targeted modules. It identifies severity-based flaws within your authentication systems and ensures compliance with established security engineering standards.
No specific penetration testing tools or external dependencies are required to use this security analysis skill. It operates independently, providing vulnerability assessment guidance, OWASP Top 10 checks, and threat modeling methodologies without needing additional software installations.
outfitter-devAudit codebases for security vulnerabilities and misconfigurations using OWASP and CWE mappings.
bostonaholicAudit code changes for OWASP Top 10 vulnerabilities and severity.
Arnutt-NDetect OWASP Top 10 risks and misconfigurations in HR-IMS code.
gerald-icaFuzz test REST, SOAP, and GraphQL APIs to detect security vulnerabilities.
