Owasp Security

This is a comprehensive security reference that teaches Claude the OWASP Top 10:2025, plus the LLM and Agentic AI security frameworks. It's built for code reviews and security-sensitive development work. The skill includes quick-reference tables, concrete before-and-after code examples in Python for common vulnerabilities like SQL injection and broken access control, and specific checklists for AI systems (prompt injection, tool misuse, memory poisoning). What stands out is the coverage of emerging risks like goal hijacking in agents and vector store isolation in RAG systems. Use it when you're implementing auth, handling user input, or building anything that touches LLMs or autonomous agents. It's dense but practical.

skills.sh installs: 2.6K
GitHub stars: 437
last updated: Jul 14, 2026

View on GitHub

Install

$ npx -y skills add agamm/claude-code-owasp --skill owasp-security --agent claude-code

Installs into .claude/skills of the current project.

Files

OWASP Security

Apply these standards when writing or reviewing code. For a review, follow the workflow below.

Reference files (read the one the task needs, and only the section you need):

reference/review-checklist.md: coverage checklist for every Top 10 category, plus LLM and agent checks. Read during step 3 of a review.
reference/languages.md: per-language pitfalls with unsafe/safe examples for 20+ languages. Read the section for the language under review.
reference/config-and-supply-chain.md: A02 and A03 in Dockerfiles, Kubernetes, Terraform, framework config, security headers, lockfiles, and CI/CD. Read when the change touches config, IaC, dependencies, or pipelines.
reference/owasp-report.md: attack vectors, mitigations, and worked examples for every Top 10:2025, ASVS 5.0, LLM Top 10, and Agentic item. About 1100 lines: jump to the section you need.