OWASP Top 10:2025 secure-coding material for Claude Code, written to be read by an agent while it writes backend code.
Skill Claude CodeCodex
Part of secure-coding
Full security inventory of every HTTP route in a backend project — each route marked clean or carrying findings, with the exploitation path and the mitigation, written in the user's language (pt-BR by default). Use when the user runs /api-secure-report, or asks for a security report, audit or inventory of the…
Skill Claude CodeCodex
Part of secure-coding
Language-agnostic OWASP Top 10:2025 rules for writing and reviewing backend/API code, plus per-stack idiom files for NestJS, Laravel and Spring Boot. Use before writing or modifying any route handler, controller, guard/policy, query, auth flow, app config, or dependency — in any language. Also use when the user asks…