Owasp Security Check
Scans web applications against OWASP Top 10 vulnerabilities using automated checks and provides prioritized remediation suggestions.
Install on your platform
We auto-selected Claude Code based on this skill’s supported platforms.
Run in terminal (recommended)
claude mcp add emerson1337-owasp-security-check npx -- -y @trustedskills/emerson1337-owasp-security-check
Or manually add to ~/.claude/settings.json
{
"mcpServers": {
"emerson1337-owasp-security-check": {
"command": "npx",
"args": [
"-y",
"@trustedskills/emerson1337-owasp-security-check"
]
}
}
}Requires Claude Code (claude CLI). Run claude --version to verify your install.
About This Skill
What it does
This skill performs a security check based on the OWASP Top 10 vulnerabilities. It analyzes provided text or URLs to identify potential security risks and provides a report detailing findings related to common web application security issues. The tool aims to help users understand and mitigate potential attack vectors in their applications or code.
When to use it
- Code Review: Assess custom-written code for common vulnerabilities before deployment.
- Website Security Scan: Quickly check a website's publicly accessible pages for OWASP Top 10 related issues.
- API Analysis: Evaluate the security posture of an API endpoint by providing its documentation or example requests.
- Security Awareness Training: Demonstrate potential vulnerabilities to developers and stakeholders through practical examples.
Key capabilities
- OWASP Top 10 vulnerability detection
- Text analysis for security flaws
- URL scanning for web application risks
- Report generation with findings
Example prompts
- "Analyze this code snippet for OWASP vulnerabilities: [code]"
- "Perform a security check on the website https://example.com."
- "Can you find any potential issues in this API documentation?"
Tips & gotchas
This skill is designed to identify potential risks and does not guarantee complete vulnerability detection. It's best used as part of a broader security assessment process, alongside other testing methods.
Tags
TrustedSkills Verification
Unlike other registries that point to live repositories, TrustedSkills pins every skill to a verified commit hash. This protects you from malicious updates — what you install today is exactly what was reviewed and verified.
Security Audits
| Gen Agent Trust Hub | Pass |
| Socket | Pass |
| Snyk | Pass |
🌐 Community
Passed automated security scans.