52 tagged owasp, measured the same way as everything else here.
Browse within: appsec 46ai-security 24owasp-juice-shop 23owasp-llm 23owasp-llm-top-10 23red-team 18application-security 5best-practices 5cheatsheets 5code 5
Agent Claude Code
Duplication and placement reviewer for OWASP cheat sheet changes. Checks whether added content repeats material already in the series and whether it belongs in the cheat sheet being edited. Invoked by /review-cheatsheet-pr.
Agent Claude Code
Link and source-quality auditor for OWASP cheat sheet changes. Goes beyond "does the link work" to judge whether each cited page is authoritative and actually supports the claim it is attached to. Invoked by /review-cheatsheet-pr.
Agent Claude Code
Developer-practicality reviewer for OWASP cheat sheet changes. Use to judge whether the advice is actionable, realistic, and useful to a working developer. Invoked by /review-cheatsheet-pr.
Agent
Security vulnerability detection and remediation specialist. OWASP Top 10, secrets, injection.
Agent
INTERNAL — Stage 4 of the create-threat-model skill. Rewrites the prose of an assembled threat model for clarity and consistency, and changes nothing else. Reads the bounded projection at .dispatch-context/editorial/blocks.json and writes one plan to .dispatch-context/editorial/plan.json; applyeditorialplan.py…
Agent
INTERNAL renderer for Stage 2 of create-threat-model. Invoke only from the skill after Stage 1 has produced validated intermediate artifacts.
Agent
INTERNAL — controller-dispatched cross-component threat triage; validates rating consistency and prioritization, writes .triage-flags.json, and annotates .threats-merged.json.
Agent
Deep codebase security scanner. Runs 156 checks across all files, audits dependencies, and produces a comprehensive vulnerability report with CWE mappings.
Agent
An agent that turns detected vulnerabilities into concrete attack scenarios by analysing how weaknesses can be chained together.
Agent
A static code-analysis agent that looks for Cross-Site Request Forgery (CSRF), an attack where a victim’s browser is tricked into sending an unwanted request to a site where they are signed in.
Agent
A security-checking agent for WordPress, the software used to build many websites, that looks for unsafe coding patterns in the source code.
Agent
Read-only auditor dispatched by /api-secure-report to evaluate one slice of a codebase — a group of routes, or one cross-cutting area — against assigned OWASP Top 10:2025 review questions. Not for direct invocation.
ReeperReepx/Security-Audit-Claude-Skill
Agent
Parallelized read-only scanner that checks a batch of files against security patterns and returns structured findings.