owasp-top-10 skills

19 tagged owasp-top-10, measured the same way as everything else here.

Browse within: owasp 11fastapi 10flask 10

injection

01

scholarly360/owasp-top10-web-skills

Skill Claude CodeCodex

Expert Python security testing skill for OWASP A05:2025 — Injection vulnerabilities in FastAPI and Flask applications. Use this skill whenever the user asks about: SQL injection, XSS, SSTI (Server-Side Template Injection), OS command injection, ORM injection, LLM prompt injection, input validation, parameterized…

not rated 22 6mo ago A 176 tokens original MIT

agent-security

02

olanokhin/agent-security-skill

Skill Codex

Use when reviewing or writing LLM, RAG, MCP, tool, or agent code for OWASP-aligned security issues; triggered by "owasp my code", "owasp this PR", AI security review, PR review, or changes to AI system code.

not rated 5 +1 4mo ago A 57 tokens original MIT

agentsec

03

semiotic-ai/agentsec

Skill Claude CodeCodex

Audit AI agent skills for security vulnerabilities. Use when scanning installed skills against the OWASP Agentic Skills Top 10, checking skills before running them, gating CI/CD on skill safety, or generating audit reports (text, JSON, SARIF, HTML) for stakeholders.

not rated 5 3mo ago A 57 tokens original MIT

harden

04

Calvin-LLC/agentic-hardening-skill

Skill Claude CodeCodex

Evidence-driven codebase hardening. Audits security (OWASP Top 10:2025), supply chain (inventory vs SBOM vs SLSA v1.2), reliability (OTel + operational limits), tests (sandboxed tiers), and accessibility triage (WCAG 2.2 AA, handed off to the wcag skill for browser verification). Audit discipline follows the…

not rated 3 changed 1mo ago A 150 tokens original MIT

aegis

05

Erkan3034/aegis

Skill Claude CodeCodex

Production-grade red-team security audit skill for AI coding assistants. Audits codebases for OWASP Top 10 vulnerabilities, auth flaws, IDOR, XSS, SSRF, JWT misuse, Supabase policies, and provides drop-in secure code replacements with zero exfiltration risk.

not rated 2 2mo ago A 61 tokens original MIT

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: