Laravel Owasp Security
This is a comprehensive OWASP Top 10 security auditor built specifically for Laravel 13 with React/Inertia.js stacks. It walks through authentication flaws, SQL injection, XSS vulnerabilities, CSRF gaps, and insecure session configs with concrete Laravel-specific checks like missing $fillable guards, raw SQL bindings, and dangerouslySetInnerHTML abuse. The output format is clean: PASS/FAIL/N/A per checklist item with file and line numbers but no code reproduction. What makes this genuinely useful is the dual-mode design. You can run a full codebase audit or use it as a secure coding reference while building features involving auth, payments, or file uploads. It also catches Inertia-specific data leakage risks that generic security tools miss.
- skills.sh installs
- 1.1K
- GitHub stars
- 102
- last updated
- Aug 21, 2026
Install
$ npx -y skills add asyrafhussin/agent-skills --skill laravel-owasp-security --agent claude-codeInstalls into .claude/skills of the current project.
Files
Laravel OWASP Security
Dual-purpose security skill for Laravel 13 + React/Inertia.js applications. Run a full OWASP Top 10 audit against a codebase, or use as a secure coding reference when building features.
How to Audit
Step 1: Detect Stack
Check if the project uses React + Inertia.js by looking for:
app/Http/Middleware/HandleInertiaRequests.phpexistsresources/js/contains.tsxor.jsxfilesinertiajs/inertia-laravelincomposer.json@inertiajs/reactinpackage.json
If detected, state at the top of the report:
"React + Inertia.js detected — Laravel OWASP checklist AND React/Inertia security checks will both be applied."
If not detected, state:
"No React/Inertia.js detected — applying Laravel OWASP checklist only."
Step 2: Determine Scope
- If arguments provided (
$ARGUMENTS): review only those files or features - If no arguments: review the entire codebase
Step 3: Run Checklist
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageDetails
- Repository
- github.com/asyrafhussin/agent-skills
- Categories
- Frontend Development, Backend & APIs, Security, Git & Pull Requests, Documentation, Code Review & Quality, AI & Agent Building, Design & UI/UX, Finance & Trading, PHP & Laravel
- First seen
- Jun 3, 2026
More from asyrafhussin/agent-skills
All 14- Tailwind Best Practices1K
- Api Design Patterns984
- Testing Best Practices957
- Web Design Guidelines948
- Git Workflow890
- State Management834
- Php Best Practices3.8K
- React Vite Best Practices3K
- Laravel Best Practices2.4K
- Laravel Inertia React2K
- Clean Code Principles1.9K
- Typescript React Patterns1.1K
- Laravel Database Optimization1.1K
Recommended
More Frontend Development
unity-vrc-world-sdk-3niaka3dayo/agent-skills-vrc-udonVRChat World SDK 3 guide for scene and Inspector setup, component placement, optimization, and upload. Use for VRChat world scene configuration, VRC SDK compone1.1Kskills.sh installs
develop-web-gameopenai/skillsUse when Codex is building or iterating on a web game (HTML/JS) and needs a reliable development + testing loop: implement small changes, run a Playwright-based1.1Kskills.sh installs
listkostja94/marketing-skillsWhen the user wants to design, optimize, or audit list layouts for content display. Also use when the user mentions "list layout," "list design," "vertical list1.1Kskills.sh installs
plotlydavila7/claude-code-templatesInteractive scientific and statistical data visualization library for Python. Use when creating charts, plots, or visualizations including scatter plots, line c1.1Kskills.sh installs
da-authadobe/skillsUse this when another step needs to call the admin.da.live API, for example before pushing HTML content, listing documents, or triggering a DA preview, and you 1.1Kskills.sh installs
email-designinference-sh/skillsEmail marketing design with layout patterns, subject line formulas, and deliverability rules. Covers welcome sequences, promotional emails, transactional templa1Kskills.sh installs