Web Security Testing

This is a structured workflow for testing web apps against OWASP Top 10 vulnerabilities, broken into seven phases from reconnaissance through reporting. It chains together specialist skills like sql-injection-testing, xss-html-injection, and idor-testing with copy-paste prompts at each stage. Honestly most useful as a checklist to make sure you're not skipping categories during a pentest or bug bounty session. The phase structure keeps you methodical, which matters when you're context-switching between injection types and access control issues. Assumes you already have the component skills installed and know enough about web security to interpret what Claude finds.

skills.sh installs: 709
GitHub stars: 43.1K
last updated: Jul 14, 2026

View on GitHub

Install

$ npx -y skills add sickn33/antigravity-awesome-skills --skill web-security-testing --agent claude-code

Installs into .claude/skills of the current project.

Files

⚠️ AUTHORIZED USE ONLY This skill is for educational purposes or authorized security assessments only. You must have explicit, written permission from the system owner before using this tool. Misuse of this tool is illegal and strictly prohibited.

Web Security Testing Workflow

Overview

Specialized workflow for testing web applications against OWASP Top 10 vulnerabilities including injection attacks, XSS, broken authentication, and access control issues.