A practitioner's guide to application security grounded in the OWASP Top 10 2021. This skill gives you code-level patterns for preventing injection attacks, XSS, CSRF, SSRF, broken authentication, and the rest of the usual suspects. It includes threat modeling basics, a security headers quick reference, and concrete examples in TypeScript showing parameterized queries, context-aware output encoding, and allowlist-based validation. The approach is defense in depth with multiple independent controls. Best when you're implementing auth flows, reviewing code for vulnerabilities, or need to know which CSP directive actually stops inline scripts. Stays at the application layer, so network security and secrets rotation live elsewhere.

skills.sh installs
145
GitHub stars
168
last updated
Jun 3, 2026

Install

$ npx -y skills add absolutelyskilled/absolutelyskilled --skill appsec-owasp --agent claude-code

Installs into .claude/skills of the current project.

Files

A practitioner's guide to application security grounded in the OWASP Top 10 2021. This skill gives you code-level patterns for preventing injection attacks, XSS, CSRF, SSRF, broken authentication, and the rest of the usual suspects. It includes threat modeling basics, a security headers quick reference, and concrete examples in TypeScript showing parameterized queries, context-aware output encoding, and allowlist-based validation. The approach is defense in depth with multiple independent controls. Best when you're implementing auth flows, reviewing code for vulnerabilities, or need to know which CSP directive actually stops inline scripts. Stays at the application layer, so network security and secrets rotation live elsewhere.

Browse the repository on GitHub

Sponsors

Details

Repository
github.com/absolutelyskilled/absolutelyskilled
Category
Security
First seen
Jun 3, 2026

More from absolutelyskilled/absolutelyskilled

All 120

Recommended

More Security
1sergiodxa avatarowasp-security-checksergiodxa/agent-skillsSecurity audit guidelines for web applications and REST APIs based on OWASP Top 10 and web security best practices. Use when checking code for vulnerabilities, 1.7Kskills.sh installs
2aradotso avataropenclaw-security-hardeningaradotso/security-skillsopenclaw security hardening971skills.sh installs
3harperaa avatarauthentication-authorization-clerkharperaa/secure-claude-skillsImplement secure authentication and authorization using Clerk. Use this skill when you need to authenticate users, protect routes, check permissions, implement 187skills.sh installs
4giuseppe-trisciuoglio avatarunit-test-security-authorizationgiuseppe-trisciuoglio/developer-kitProvides patterns for unit testing Spring Security with `@PreAuthorize`, `@Secured`, `@RolesAllowed`. Validates role-based access control and authorization poli3.9Kskills.sh installs
5sickn33 avatarfrontend-mobile-security-xss-scansickn33/antigravity-awesome-skillsfrontend mobile security xss scan444skills.sh installs
6ancoleman avatarsecurity-hardeningancoleman/ai-design-componentsReduces attack surface across OS, container, cloud, network, and database layers using CIS Benchmarks and zero-trust principles. Use when hardening production i180skills.sh installs