Stats
Actions
Tags
From security-tools
[STUB - Not implemented] OWASP Top 10 2021 vulnerability detection including injection, XSS, and security misconfiguration. PROACTIVELY activate for: [TODO: Define on implementation]. Triggers: [TODO: Define on implementation]
How this skill is triggered — by the user, by Claude, or both
Slash command
/security-tools:owasp-code-analysisThe summary Claude sees in its skill listing — used to decide when to auto-load this skill
> **STUB: This skill is not yet implemented**
STUB: This skill is not yet implemented
This placeholder preserves the documented plugin structure. See parent plugin README for planned capabilities.
OWASP Top 10 2021 Coverage:
| Rank | Category | Detection |
|---|---|---|
| A01 | Broken Access Control | IDOR patterns, privilege checks |
| A02 | Cryptographic Failures | Weak hashing, plaintext secrets |
| A03 | Injection | SQL/NoSQL/Command injection, XSS |
| A05 | Security Misconfiguration | Verbose errors, default credentials |
| A06 | Vulnerable Components | CVE scanning in package.json/requirements.txt |
| A07 | Authentication Failures | Weak session mgmt, missing MFA |
| A08 | Data Integrity Failures | Insecure deserialization |
| A09 | Security Logging Failures | Missing audit logs |
| A10 | Server-Side Request Forgery | SSRF via URL params |
npx claudepluginhub agentient/vibekit --plugin security-toolsReviews codebases against the OWASP Top 10 vulnerability categories for security audits, pre-launch checks, and post-incident analysis.
Reviews code and architectures against OWASP Top 10:2025 web application security risks. Useful for vulnerability audits, codebase reviews, remediation guidance, and secure coding patterns.
Reviews project code against OWASP Top 10 vulnerabilities: broken access control, injections (SQL, XSS, CSRF), cryptographic failures, insecure design, misconfigurations, and authentication issues.