Owasp Security Check

This is a systematic security audit framework that walks you through OWASP Top 10 checks across 20 specific rules organized by severity. It covers the usual suspects: broken access control, injection flaws, cryptographic failures, plus things like SSRF, file upload validation, and security headers. Each rule includes bad versus good code examples in TypeScript showing exactly what to look for and how to fix it. The workflow is straightforward: scan by priority level (critical first), load the relevant rule files, document findings with file locations, then provide concrete remediation. Most useful right before production deployment or when auditing authentication flows and API endpoints. The examples are practical enough that you can adapt them directly rather than hunting through OWASP docs.

skills.sh installs: 1.7K
GitHub stars: 92
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add sergiodxa/agent-skills --skill owasp-security-check --agent claude-code

Installs into .claude/skills of the current project.

Files

OWASP Security Check

Comprehensive security audit patterns for web applications and REST APIs. Contains 20 rules across 5 categories covering OWASP Top 10 and common web vulnerabilities.