skills.rest
PerryB-GIT
PerryB-GITCOMMUNITY
Explore all skills by this author →
GitHub

webapp-security

Detect OWASP Top 10 vulnerabilities in web applications and APIs.

Updated Aug 23, 2026
Search Tags:#owasp#vulnerability assessment#penetration testing#web security#api security#injection attacks
One-click install
npx skills add https://github.com/PerryB-GIT/wascar-perry-workspace --skill webapp-security
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: webapp-security
Source: https://github.com/PerryB-GIT/wascar-perry-workspace/tree/main/claude-skills-package/skills/web-dev/webapp-security
Command: npx skills add https://github.com/PerryB-GIT/wascar-perry-workspace --skill webapp-security

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps identify and mitigate common web application security vulnerabilities, protecting against data breaches and unauthorized access.

Core Features & Use Cases

  • Vulnerability Scanning: Detects issues across OWASP Top 10 categories like Broken Access Control, Injection flaws (SQLi, XSS, Command Injection), and Security Misconfigurations.
  • API Security Testing: Assesses the security posture of REST and GraphQL APIs.
  • Authentication & Authorization Testing: Checks for weaknesses in login mechanisms and access controls.
  • Use Case: Before deploying a new web application, use this Skill to perform a comprehensive security audit to identify and fix critical vulnerabilities.

Quick Start

Run a web application security scan against the provided URL.

Frequently Asked Questions about webapp-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I test my web application for OWASP Top 10 vulnerabilities?▼

You can secure REST and GraphQL APIs by using this Skill to assess their security posture. It performs API security testing to identify weaknesses in authentication, authorization, and common injection attacks targeting your endpoints.

Do I need nmap and sqlmap installed for web security testing?▼

Yes, deterministic web security testing requires tools like nmap, sqlmap, dalfox, and jwt_tool. These dependencies execute specific vulnerability assessment tasks, including SQL injection detection, cross-site scripting exploitation, and authentication token analysis.

What is the best way to check for authentication and access control bypasses?▼

The best way to check for authentication and access control bypasses is using this Skill's dedicated testing module. It analyzes login mechanisms and authorization controls to identify weaknesses that could lead to unauthorized access and data breaches.

Can I perform a penetration test on a web app before deployment?▼

Yes, you can perform a comprehensive security audit and penetration test on web applications before deployment. This identifies critical vulnerabilities like injection attacks and misconfigurations, allowing you to fix issues and secure your web application proactively.

Related Skills

Explore More Software Engineering Skills→
mahamaneharouna9-cpumahamaneharouna9-cpu

pentest-expert

Guide penetration tests with commands for reconnaissance, enumeration, and vulnerability scanning.

Community
Advanced
dtbuchholzdtbuchholz

security

Enforce secure coding practices and identify OWASP Top 10 vulnerabilities.

Community
Advanced
JingyueCongJingyueCong

shodan-reconnaissance

Discovers and analyzes internet-exposed assets using the Shodan API.

Community
Advanced
HelloEverybobyHelloEveryboby
17

SDLCOrchestrator

Automate SAST, DAST, and SCA security scans in CI/CD pipelines.

Community
Intermediate