FreeSkills
Commits, branches and sync with the but CLI
- 361361 downloads
- 198198 likes
- 103103 saves
Works with
- Claude Code
- Codex
- Cursor
- and 3 more
Web security audit based on OWASP v1.0.0
Use this resource to audit the security of a web app or API
New
- 579 downloads
- 119 likes
- 101 saves
Free
Install with the CLI
In a terminal, from the folder you want:
npx --yes palatekit@latest install owasp-web-security-auditWith no option, the skill goes to ~/.agents/skills/; add --agent claude-code (or codex, cursor…) to target an agent.
First time: connect the CLI with
npx --yes palatekit@latest loginThe agent reviews the code in priority order, applying twenty rules across five categories, then writes a report. You get a ranked list of flaws and the fixes to apply before going to production.
Mostly picked by
Updated November 2, 2026
Previews
Details
- Install guides
- Generates with
- Your agent's model
- Licence
- MIT
Similar resources
View all- Free
FreeSkills
Sentry CLI guide
- 525525 downloads
- 117117 likes
- 128128 saves
Works with- Claude Code
- Codex
- Cursor
- and 3 more
FreeSkills
Drizzle ORM best practices with PostgreSQL
- 407407 downloads
- 194194 likes
- 151151 saves
Works with- Claude Code
- Codex
- Cursor
- and 3 more
FreeSkills
SLO design wizard
- 537537 downloads
- 105105 likes
- 242242 saves
Works with- Claude Code
- Codex
- Cursor
- and 3 more
FreeSkills
User stories and sprint fit
- 451451 downloads
- 150150 likes
- 132132 saves
Works with- Claude Code
- Codex
- Cursor
- and 3 more
FreeSkills
Capacity-based sprint plan
- 423423 downloads
- 192192 likes
- 102102 saves
Works with- Claude Code
- Codex
- Cursor
- and 3 more
FreeSkills
Startup CTO advisor
- 580580 downloads
- 201201 likes
- 242242 saves
Works with- Claude Code
- Codex
- Cursor
- and 3 more
FreeSkills
Creating GitHub pull requests with quality checks
- 427427 downloads
- 230230 likes
- 196196 saves
Works with- Claude Code
- Codex
- Cursor
- and 3 more
What you get
- rules/broken-access-control.md and rules/injection-attacks.md : access control and injection rules
- rules/api-security.md and rules/rate-limiting.md : API and rate-limiting rules
- SKILL.md : priority-based audit method and report template
Good fit for
- You are about to put an API that handles personal data into production
- A new feature handles files or user logins
Not for
Tags
- security
- owasp
- audit
- api
About
You say
“Audit the authentication API's security before going to production.”
Skill published by sergiodxa under the MIT license, delivered in its original version.
Show moreShow less
How to use it
- Install the skill in your agent's skills folder
- Ask your agent to audit the security of a web app or API
- Review and adjust the result
Content preview
Files
- LICENSE1 KB
- NOTICE-PALATEKIT.md0.5 KB
- rules/api-security.md3.9 KB
- rules/authentication-failures.md4.9 KB
- rules/broken-access-control.md3.6 KB
- rules/cors-configuration.md3.7 KB
- rules/cryptographic-failures.md4.3 KB
- rules/csrf-protection.md3.5 KB
- rules/data-integrity-failures.md4.3 KB
- rules/file-upload-security.md3.3 KB
- rules/injection-attacks.md3.6 KB
- rules/insecure-design.md4 KB
- rules/logging-monitoring.md4.2 KB
- rules/rate-limiting.md3.7 KB
- rules/redirect-validation.md3 KB
- rules/secrets-management.md3.4 KB
- rules/security-headers.md3.5 KB
- rules/security-misconfiguration.md3 KB
- rules/sensitive-data-exposure.md4 KB
- rules/session-security.md3.3 KB
- rules/ssrf-attacks.md2.7 KB
- rules/vulnerable-dependencies.md3 KB
- SKILL.md12.3 KB
Origin and licence
Listed unmodified
- Author
- sergiodxa
- Source
- github.com/sergiodxa/agent-skills/tree/40e21b46189d5c7de6610b68a25280af863f8775/skills/owasp-security-check
- Licence
- MIT
Notice
« owasp-security-check » (sergiodxa, MIT) livré dans sa version d'origine : fiche en français et en anglais par PalateKit.
User reviews
–
No ratings yet
Loading reviews…