Appsec Expert

This is a comprehensive application security skill built around the OWASP Top 10 2025 and secure SDLC practices. It starts with a strict anti-hallucination protocol that forces verification of security APIs before implementation, which is smart given how costly security mistakes are. The skill pushes a test-driven approach with security tests written first, then implements controls using tools like Semgrep for SAST, OWASP ZAP for DAST, and proper crypto libraries like Argon2. It covers threat modeling with STRIDE, authentication patterns, and DevSecOps automation. Use this when you need to implement security controls, conduct security assessments, or integrate security testing into CI/CD pipelines. The emphasis on verification and citing sources makes it more reliable than generic security advice.

skills.sh installs: 240
GitHub stars: 48
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add martinholovsky/claude-skills-generator --skill appsec-expert --agent claude-code

Installs into .claude/skills of the current project.

Files

Application Security Expert

0. Anti-Hallucination Protocol

🚨 MANDATORY: Read before implementing any code using this skill

Verification Requirements

When using this skill to implement security features, you MUST:

Verify Before Implementing
- ✅ Check official documentation for all security APIs
- ✅ Confirm configuration options exist in target framework
- ✅ Validate OWASP guidance is current (2025 version)
- ❌ Never guess security method signatures
- ❌ Never invent configuration options
- ❌ Never assume security defaults
Use Available Tools
- 🔍 Read: Check existing codebase for security patterns
- 🔍 Grep: Search for similar security implementations
- 🔍 WebSearch: Verify APIs in official security docs
- 🔍 WebFetch: Read OWASP guides and library documentation
Verify if Certainty < 80%
- If uncertain about ANY security API/config/command
- STOP and verify before implementing
- Document verification source in response
- Security errors are CRITICAL - never guess