Individual skill
owasp-top10
Not available
plugins/faos-security-engineer/skills/owasp-top10/SKILL.md
Source commit a991acae1b74d338ca89ec2245eaa13ad680dc8f
What was checked
- Matches the observed repository HEAD
- Yes
- Scanner rules are current
- No
- Repository scan complete
- No
- Skill scan complete
- No
- Observed behavior
- Not checked yet
- Last checked
- Nov 11, 2026
These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.
Install this skill
Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.
Standard SKILL.md format has not been attested at this commit. No installation command is available; inspect the source.
Repository context
- Repository stars (not skill ratings)
- 39
- Repository last updated
- Jul 8, 2026
- License
- Apache-2.0
Observed agent integration: No specific integration evidence. Standard SKILL.md installation does not imply verified compatibility.
- agent-plugins Repository topic
- ai-skills Repository topic
- claude-cowork Repository topic
- enterprise-ai Repository topic
- faos Repository topic
- gemini-cli Repository topic
- github-copilot Repository topic
- openai-codex Repository topic
- skill-marketplace Repository topic
- agentic-ai Repository topic
Declared tags are partial or unavailable.
Files and excerpt
File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.
Browse files
Read excerpt
<!-- AUTO-GENERATED by export-plugins.py — DO NOT EDIT -->
---
name: owasp-top10
description: OWASP Top 10 (2021) web application security risks with prevention controls, detection techniques, and remediation guidance
tags: [owasp, security]
---
# OWASP Top 10 Web Application Security Risks
## Overview
The OWASP Top 10 (2021 edition) is the most widely referenced standard for web application security awareness. It represents a broad consensus on the most critical security risks facing web applications, ranked by prevalence, exploitability, and impact. Security agents use this skill to identify, classify, and remediate web application vulnerabilities across the full development lifecycle.
Each category aggregates related CWEs (Common Weakness Enumerations) and provides actionable prevention guidance. The 2021 edition introduced three new categories (Insecure Design, Software and Data Integrity Failures, SSRF) and restructured several existing ones from the 2017 edition.