owasp skills

167 tagged owasp, measured the same way as everything else here.

Browse within: ai-security 70appsec 60pentest 43Prompt Injection 35llm-security 32penetration-testing 32agent-security 31audit 31owasp-juice-shop 30threatmodeler 30threatmodelling 30mcp-security 28cybersecurity 25hardening 25

code-review

01

OWASP/CheatSheetSeries

Skill Claude CodeCodex

Rigorous review of OWASP Cheat Sheet Series pull requests across security correctness, practicality, link and source verification, duplication, and language. Use for any pull request that touches cheatsheets/ or cheatsheetsdraft/, or that adds or changes external links or citations.

not rated 34k +130 changed 13d ago A 56 tokens CC-BY-SA-4.0

Agent-Threat-Rule/agent-threat-rules

Skill Claude CodeCodex

Generate clinical trial protocols for medical devices or drugs. This skill should be used when users say "Create a clinical trial protocol", "Generate protocol for [device/drug]", "Help me design a clinical study", "Research similar trials for [intervention]", or when developing FDA submission documentation for…

not rated 416 +8 today A 70 tokens original MIT

pentest

03

Strategic-Automation/violin

Skill Claude CodeCodex

Supervised authorized pentest: scope, route, validate, report.

not rated 151 +2 changed 2d ago A SkillSpector: pass 17 tokens original MIT

TeamArtisanThrive/r03-anthropics-skills-security

Skill Claude CodeCodex

πŸ”’ Security & Compliance skill suite derived from anthropics/skills. Security audits, vulnerability management, GDPR/SOC2/ISO27001 compliance and incident response. Provides 10 specialised commands for security, compliance, gdpr workflows.

not rated 48 5mo ago A 58 tokens

PulverizeDirector/b01-gbrain-security

Skill Claude CodeCodex

πŸ”’ Threat Intelligence Brain β€” Self-wiring knowledge graph for threats, vulnerabilities and security incidents. Derived from gbrain (garrytan/gbrain). Security audits, vulnerability management, GDPR/SOC2.

not rated 45 5mo ago A 48 tokens

scholarly360/owasp-top10-web-skills

Skill Claude CodeCodex

Use this skill whenever you need to audit, test, or fix Authentication Failures (OWASP A07:2025) in Python web applications β€” especially FastAPI and Flask. Triggers include: any mention of JWT security, session management, brute force protection, credential stuffing, password policy, MFA enforcement, login rate…

not rated 22 6mo ago A 166 tokens original MIT

trap

18

bikr/TRAP

Skill Claude CodeCodex

Run a True Readiness Audit (TRAP) β€” an adversarial, evidence-first production-readiness and security audit of the current codebase. Use when the user asks to security-review, audit, threat-model, or check whether an app is production-ready / safe to ship / safe to deploy β€” especially for AI- or "vibe"-coded apps, or…

not rated 20 +1 2mo ago A 79 tokens original MIT

penetration-tester

19

chandrudp29/skillhub

Skill Claude CodeCodex

Authorized penetration tester persona β€” offensive security specialist for network, web app, cloud, and Active Directory assessments. Requires explicit authorization.

not rated 14 3mo ago A 30 tokens original MIT

saas-security

20

vitormiziara/saas-security

Skill Claude CodeCodex

Comprehensive SaaS security skill covering code auditing, checklist generation, and vulnerability reporting. TRIGGER this skill whenever the user asks to: audit code for security issues, review a codebase for vulnerabilities, generate a security checklist, check for OWASP compliance, review authentication or…

not rated 11 6mo ago A 107 tokens original MIT

meghal86/promptsonar

Skill Claude CodeCodex

Use when: the user asks to run system maintenance. Capability: executes shell commands via shellexec. Route maintenance commands through the system shell and run them.

not rated 7 15d ago A 0 tokens original MIT

ai-security-review

23

karthikrshet/aiskills

Skill Claude CodeCodex

Use this skill to audit an AI system for security vulnerabilities including prompt injection, sensitive data exposure, excessive agent permissions, unsafe tool calls, and insecure output handling. Grounded in OWASP GenAI LLM Top 10 (2026). Activates before production deployment of any LLM-based application, agent, or…

not rated 4 13d ago A 74 tokens

code-audit

24

Rootx202/appsec-skills

Skill Claude CodeCodex

Elite full-codebase security auditor for any language or stack (JavaScript, TypeScript, Python, Java, Kotlin, PHP, Go, Rust, C/C++, Ruby, C#). Trigger this whenever the user asks to review, audit, scan, harden, or "check the security" of any project, before deploying/shipping/launching a site or app, after adding…

not rated 3 3mo ago A 144 tokens

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page β€” the rest are on their repository pages: