web-security-audit

Identify OWASP Top 10 vulnerabilities and output a remediation guide.

12|2|Updated Apr 21, 2026
One-click install
npx skills add https://github.com/haomingz/kimi-skills --skill web-security-audit
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: web-security-audit
Source: https://github.com/haomingz/kimi-skills/tree/main/skills/web-security-audit
Command: npx skills add https://github.com/haomingz/kimi-skills --skill web-security-audit

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

The Skill provides a structured, repeatable way to perform OWASP Top 10 security checks on codebases, enabling fast, consistent identification of common vulnerabilities and actionable remediation guidance.

Core Features & Use Cases

  • Comprehensive A01–A10 coverage including evidence-based checklists, vulnerability descriptions, and ready-to-apply fixes.
  • Output-ready audit reports and templates for reviewer-friendly documentation, security reviews, and developer training.
  • Use cases include code review during development, security compliance checks in CI, and onboarding security awareness for teams.

Quick Start

Provide the code or repository path and ask for an OWASP Top 10 security review.

Frequently Asked Questions about web-security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate OWASP Top 10 security reviews for my codebase?

You can automate OWASP Top 10 security reviews by providing your code or repository path to trigger a structured vulnerability analysis, generating actionable remediation guides and audit templates.

Can I use this security audit skill for CI pipeline compliance checks?

Yes, this security audit supports CI pipeline compliance checks by identifying A01–A10 vulnerabilities across web applications and outputting reviewer-friendly documentation for development teams.

What is the best way to check for OWASP Top 10 vulnerabilities across different programming languages?

The best way to check for vulnerabilities across languages is applying a standardized A01–A10 checklist that analyzes codebases and provides evidence-based descriptions along with ready-to-apply sample fixes.

Does this vulnerability analysis output ready-to-use remediation guides and audit templates?

Yes, the vulnerability analysis outputs a structured remediation guide and a complete audit template, including A01–A10 checks and sample fixes for immediate use in security reviews and developer training.

How do I perform a manual code review focused on web security vulnerabilities?

To perform a manual web security code review, run a structured A01–A10 vulnerability analysis on your codebase to identify common flaws and generate a comprehensive audit report for reviewers.

Are there limitations when using automated vulnerability analysis for security training?

Automated vulnerability analysis for security training is limited to identifying OWASP Top 10 issues and providing sample fixes, serving as an onboarding awareness tool rather than replacing comprehensive manual penetration testing.