FreeSkills
Commits, branches and sync with the but CLI
- 361361 downloads
- 198198 likes
- 103103 saves
Works with
- Claude Code
- Codex
- Cursor
- and 3 more
OWASP Top 10: flaws and fixes v1.0.0
Use this resource to audit an application or code against the OWASP Top 10 web risks
New
- 421 downloads
- 202 likes
- 186 saves
Free
Install with the CLI
In a terminal, from the folder you want:
npx --yes palatekit@latest install owasp-top-ten-securityWith no option, the skill goes to ~/.agents/skills/; add --agent claude-code (or codex, cursor…) to target an agent.
First time: connect the CLI with
npx --yes palatekit@latest loginThe agent walks through the OWASP Top 10 2021 categories: broken access control, cryptographic failures, injection, insecure design, misconfiguration, vulnerable components, authentication failures, integrity failures, logging gaps and SSRF. For each, it explains how to detect it and how to fix it.
Mostly picked by
Updated November 2, 2026
Previews
Details
- Install guides
- Generates with
- Your agent's model
- Licence
- MIT
Similar resources
View all- Free
FreeSkills
Sentry CLI guide
- 525525 downloads
- 117117 likes
- 128128 saves
Works with- Claude Code
- Codex
- Cursor
- and 3 more
FreeSkills
Drizzle ORM best practices with PostgreSQL
- 407407 downloads
- 194194 likes
- 151151 saves
Works with- Claude Code
- Codex
- Cursor
- and 3 more
FreeSkills
SLO design wizard
- 537537 downloads
- 105105 likes
- 242242 saves
Works with- Claude Code
- Codex
- Cursor
- and 3 more
FreeSkills
User stories and sprint fit
- 451451 downloads
- 150150 likes
- 132132 saves
Works with- Claude Code
- Codex
- Cursor
- and 3 more
FreeSkills
Capacity-based sprint plan
- 423423 downloads
- 192192 likes
- 102102 saves
Works with- Claude Code
- Codex
- Cursor
- and 3 more
FreeSkills
Startup CTO advisor
- 580580 downloads
- 201201 likes
- 242242 saves
Works with- Claude Code
- Codex
- Cursor
- and 3 more
FreeSkills
Creating GitHub pull requests with quality checks
- 427427 downloads
- 230230 likes
- 196196 saves
Works with- Claude Code
- Codex
- Cursor
- and 3 more
What you get
- SKILL.md: overview, principles and audit workflow
- references/: one guide per category, from injection to SSRF
- references/prevention-strategies.md: prevention strategies
Good fit for
- You are reviewing an API before it goes live
- You want a structured security audit for a team
Not for
Tags
- security
- owasp
- injection
- audit
- vulnerabilities
About
You say
“Audit this authentication module against the OWASP Top 10.”
Skill published by nickcrew under the MIT license, delivered in its original version.
Show moreShow less
How to use it
- Install the skill in your agent's skills folder
- Ask your agent to audit an application or code against the OWASP Top 10 web risks
- Review and adjust the result
Content preview
Files
- LICENSE1 KB
- NOTICE-PALATEKIT.md0.5 KB
- references/assessment-workflow.md11 KB
- references/authentication-failures.md1.4 KB
- references/broken-access-control.md2 KB
- references/cryptographic-failures.md2 KB
- references/injection.md2 KB
- references/insecure-design.md2 KB
- references/integrity-failures.md1.3 KB
- references/logging-monitoring.md1.6 KB
- references/prevention-strategies.md2.9 KB
- references/security-misconfiguration.md1.7 KB
- references/ssrf.md1.8 KB
- references/vulnerable-components.md0.8 KB
- SKILL.md5.4 KB
Origin and licence
Listed unmodified
- Author
- nickcrew
- Source
- github.com/nickcrew/claude-cortex/tree/bb47af79ad3befe01ae01940fcf5f16e30a1b6df/skills/owasp-top-10
- Licence
- MIT
Notice
« owasp-top-10 » (nickcrew, MIT) livré dans sa version d'origine : fiche en français et en anglais par PalateKit.
User reviews
–
No ratings yet
Loading reviews…