Individual skill
owasp-security
Comprehensive OWASP-aligned security guidance across six standards - Top 10 (2021) for web apps, ASVS 5.0, MASVS v2.1.0 for mobile, API Security Top 10 (2023), Kubernetes Top 10 (2022), and the Agentic Applications 2026 edition for AI/LLM. Use for security reviews, vulnerability audits, secure auth/crypto/access-control implementation, Kubernetes manifest hardening, and LLM/agent prompt-injection defense - including indirect requests like "is this login flow secure?", "review this endpoint", or "audit my pod spec".
.claude-plugin/skills/owasp-security/SKILL.md
Source commit ad81bf053f80b626801decf425f501ba49983d98
What was checked
- Matches the observed repository HEAD
- Yes
- Scanner rules are current
- No
- Repository scan complete
- No
- Skill scan complete
- No
- Observed behavior
- Not checked yet
- Last checked
- Nov 4, 2026
These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.
Install this skill
Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.
An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.
Repository context
- Repository stars (not skill ratings)
- 33,210
- Repository last updated
- Nov 8, 2026
- License
- MIT
Observed agent integration: claude-code
- anthropic Repository topic
- anthropic-claude Repository topic
- claude Repository topic
- claude-code Repository topic
- agent-skills Repository topic
- ai-agents Repository topic
- claude-code-plugins Repository topic
- cli Repository topic
- mcp Repository topic
- registry Repository topic
- security Derived category
- devops Derived category
- devops-containers Derived category
- security-application Derived category
Files and excerpt
File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.
Browse files
README.mddoc · 8,699 bytesSKILL.mdcore · 29,886 bytesSKILL.mdcore · 29,886 bytesSKILL.mdcore · 29,886 bytesSKILL.mdcore · 29,886 bytesSKILL.mdcore · 29,886 bytesSKILL.mdcore · 29,886 bytesSKILL.mdcore · 29,886 bytesSKILL.mdcore · 29,886 bytesSKILL.mdcore · 29,886 bytesSKILL.mdcore · 29,886 bytesSKILL.mdcore · 29,886 bytesSKILL.mdcore · 29,886 bytesSKILL.mdcore · 29,886 bytesSKILL.mdcore · 29,886 bytesexamples/api-auth-bypass.jsruns · 3,101 bytesexamples/broken-access-control.pyruns · 7,130 bytesexamples/cryptographic-failures.jsruns · 7,667 bytesexamples/injection.jsruns · 2,080 bytesexamples/k8s-rbac.yamlasset · 4,645 bytesexamples/logging-monitoring-failures.pyruns · 14,517 bytesexamples/prompt-injection.txtdoc · 10,143 bytesexamples/security-misconfiguration.pyruns · 12,247 bytesexamples/xss.htmlasset · 4,450 bytesowasp-css-instructions.mddoc · 4,265 bytesskill.jsonasset · 12,174 bytes
Read excerpt
# Comprehensive OWASP Security Skills
A developer-focused security reference covering six OWASP standards for securing web applications, APIs, mobile apps, containers, and AI/LLM systems. Each section provides concise detection guidance, key requirements, and mitigation strategies.
## Quick Navigation
1. [OWASP Top 10 (2021)](#section-1-owasp-top-10-2021)
2. [OWASP ASVS 5.0](#section-2-owasp-asvs-50-application-security-verification-standard)
3. [OWASP MASVS v2.1.0](#section-3-owasp-masvs-v210-mobile-security)
4. [OWASP API Security Top 10](#section-4-owasp-api-security-top-10-2023)
5. [OWASP Kubernetes Top 10](#section-5-owasp-kubernetes-top-10-2022)
6. [OWASP Agentic Applications 2026](#section-6-owasp-agentic-applications-2026)
---