skills.rest
cmaenner
cmaennerCOMMUNITY
Explore all skills by this author →
Website𝕏@dafingaGitHub

web-security-review

Review web applications against the OWASP Top 10 for Web Applications (2021) vulnerabilities.

5|1|Updated Mar 5, 2026
Search Tags:#code review#vulnerability assessment#penetration testing#web security#owasp top 10#application security
One-click install
npx skills add https://github.com/cmaenner/agent-security-playbook --skill web-security-review
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: web-security-review
Source: https://github.com/cmaenner/agent-security-playbook/tree/main/skills/web-security-review
Command: npx skills add https://github.com/cmaenner/agent-security-playbook --skill web-security-review

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill addresses the critical need to identify and mitigate security vulnerabilities in web applications, protecting against common threats and data breaches.

Core Features & Use Cases

  • OWASP Top 10 Coverage: Systematically reviews applications against all 10 major web security risks.
  • Comprehensive Analysis: Assesses access control, cryptographic failures, injection flaws, and more.
  • Use Case: Use this Skill to perform a pre-deployment security audit of a new e-commerce website to ensure it's protected against common web attacks like XSS and SQL injection.

Quick Start

Review the provided web application for OWASP Top 10 vulnerabilities.

Frequently Asked Questions about web-security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit a web application for OWASP Top 10 vulnerabilities?▼

To audit a web application for OWASP Top 10 vulnerabilities, you review server-side code, assess web frameworks, and analyze application mapping to identify risks like injection, broken authentication, and XSS.

What is included in a web security vulnerability assessment?▼

A web security vulnerability assessment includes systematic analysis of access control, cryptographic failures, and injection flaws, alongside configuration reviews and framework-specific risk checks per OWASP guidelines.

Can I use this to review server-side code for XSS and SQL injection risks?▼

Yes, you can review server-side code to identify XSS and SQL injection risks by performing comprehensive risk assessments and framework-specific checks against the OWASP Top 10 categories.

Does this security review cover broken authentication and access control flaws?▼

Yes, this security review covers broken authentication and access control flaws by systematically evaluating application configurations and mapping risks across all OWASP Top 10 categories.

What's the best way to check web frameworks for security risks before deployment?▼

The best way to check web frameworks for security risks before deployment is to conduct a pre-deployment security audit that performs framework-specific checks and configuration reviews to mitigate common web attacks.

Are there limitations to reviewing web applications against the OWASP Top 10?▼

Reviewing web applications against the OWASP Top 10 focuses on identifying common risks like injection and cryptographic failures, but requires complete application mapping and server-side code access for accurate analysis.

Related Skills

Explore More Software Engineering Skills→
securityfortechsecurityfortech
6

web-fingerprinting

Identify web server type, frameworks, and versions via banner and header analysis.

Official
Intermediate
ripgraphicsripgraphics

web-security-expert

Identify and test OWASP Top 10 web vulnerabilities like SQL injection and XSS.

Community
Intermediate
AgentSecOpsAgentSecOps
183

sast-semgrep

Run Semgrep SAST scans to detect security flaws and map findings to OWASP and CWE standards.

Official
Advanced
summarybotngsummarybotng
2

security-testing

Scan code, dependencies, and configurations for OWASP Top 10 vulnerabilities.

Official
Advanced