owasp skills

165 tagged owasp, measured the same way as everything else here.

Browse within: ai-security 68appsec 57pentest 44Prompt Injection 35llm-security 32penetration-testing 32agent-security 31audit 31mcp-security 28owasp-juice-shop 28threatmodeler 28threatmodelling 28hardening 25cybersecurity 24

saas-cybersecurity

25

YankielDBC2/saas-cybersecurity

Skill Claude CodeCodex

Audit and safely harden authorized SaaS web applications across frameworks and hosting providers. Use for OWASP-aligned reviews, runtime browser checks, HTTP headers, XSS/CSRF, access control, secrets, payments, uploads, privacy, abuse controls, supply-chain risk, link injection, or security remediation; do not use…

not rated 2 10d ago A 86 tokens original MIT

mcpkernel-security

26

piyushptiwari1/mcpkernel

Skill Claude CodeCodex

AI agent security gateway — policy enforcement, taint tracking, tool poisoning detection, DLP chain analysis, and SARIF output for CI/CD.

not rated 2 2mo ago A 34 tokens original Apache-2.0

aegis

27

Erkan3034/aegis

Skill Claude CodeCodex

Production-grade red-team security audit skill for AI coding assistants. Audits codebases for OWASP Top 10 vulnerabilities, auth flaws, IDOR, XSS, SSRF, JWT misuse, Supabase policies, and provides drop-in secure code replacements with zero exfiltration risk.

not rated 1 1mo ago A 61 tokens original MIT

niels-emmer/myace

Skill Claude CodeCodex

A PASS/FAIL/N/A checklist covering injection, authorization, secrets handling, dependency risk, and input validation for reviewing a diff or codebase.

not rated 1 changed 4d ago A 33 tokens original MIT

compuute-scan

29

Compuute/compuute-scan-api

Skill Claude CodeCodex

Scan a public GitHub MCP-server repository for security issues before installing or connecting to it. Calls the hosted compuute-scan API at scan.compuute.se and returns severity counts, a 0-100 score, the most severe findings, and an honest triage disclaimer. Use BEFORE recommending or installing an unfamiliar MCP…

not rated 0 13d ago A 122 tokens original MIT

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: