web-security

Analyze web applications and HTTP services to identify security vulnerabilities and generate remediation reports.

39|4|Updated May 6, 2026

Search Tags:#penetration testing #security audit #web security #web application #risk analysis #vulnerability scanning

Ready to run

npx skills add https://github.com/pruiz/CodeCome --skill web-security-pruiz

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: web-security
Source: https://github.com/pruiz/CodeCome/tree/main/.opencode/skills/web-security
Command: npx skills add https://github.com/pruiz/CodeCome --skill web-security-pruiz

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill addresses the challenge of assessing and strengthening the security of web applications and HTTP services, helping developers and security analysts identify vulnerabilities before exploitation.

Core Features & Use Cases

Reconnaissance & Vulnerability Identification: Detect routes, handlers, and security misconfigurations such as broken access controls, injection points, and unsafe file handling.
Risk Prioritization & Reporting: Generate detailed reports highlighting high-risk issues like SQL injection, XSS, CSRF, SSRF, and insecure CORS settings.
Use Case: A security team audits a web API to uncover IDOR flaws and insecure deserialization, then produces a comprehensive report for remediation planning.

Quick Start

Use the web-security skill to analyze a target web application by providing its URL and review the generated vulnerability report.

Frequently Asked Questions about web-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I scan a web application for vulnerabilities like injection and broken authentication?▼

To scan a web application for vulnerabilities, you provide the target URL to trigger reconnaissance and pattern detection. The analysis identifies security flaws like injection points, broken authentication, and unsafe file handling across diverse web platforms and frameworks.

What is vulnerability risk prioritization for web APIs?▼

Vulnerability risk prioritization for web APIs is the process of assessing identified security flaws to determine severity levels. It generates detailed remediation reports highlighting high-risk issues such as SQL injection, XSS, CSRF, SSRF, and insecure CORS configurations for security teams.

Can I detect IDOR flaws and insecure deserialization during a security audit?▼

Yes, you can detect IDOR flaws and insecure deserialization during a security audit. The analysis process specifically targets these access control and data handling vulnerabilities, allowing security professionals to assess risk levels and produce comprehensive remediation planning reports.

Does web security analysis work for diverse frameworks and HTTP services?▼

Web security analysis works for diverse web platforms, frameworks, and HTTP services. It performs reconnaissance to detect routes, handlers, and security misconfigurations regardless of the underlying architecture, helping developers identify vulnerabilities before exploitation occurs.

How do I generate a remediation report after identifying security misconfigurations?▼

To generate a remediation report after identifying security misconfigurations, the analysis assesses risk levels of detected vulnerabilities like broken access controls and injection points. It outputs detailed reports prioritizing high-risk issues to guide remediation planning for developers and analysts.