FreeSkills
Commits, branches and sync with the but CLI
- 361361 downloads
- 198198 likes
- 103103 saves
Works with
- Claude Code
- Codex
- Cursor
- and 3 more
Web vulnerability reference, OWASP-aligned v1.0.0
Use this resource to identify and explain the vulnerabilities of a web application
New
- 523 downloads
- 151 likes
- 151 saves
Free
Install with the CLI
In a terminal, from the folder you want:
npx --yes palatekit@latest install web-vulnerabilities-reference-taxonomyWith no option, the skill goes to ~/.agents/skills/; add --agent claude-code (or codex, cursor…) to target an agent.
First time: connect the CLI with
npx --yes palatekit@latest loginThe agent presents the main families of web vulnerabilities, from injection to access control, including APIs, misconfigurations and mobile or IoT devices. For each one, it explains the cause, the impact and the remediation.
Mostly picked by
Updated November 2, 2026
Previews
Details
- Install guides
- Generates with
- Your agent's model
- Licence
- MIT
Similar resources
View all- Free
FreeSkills
Sentry CLI guide
- 525525 downloads
- 117117 likes
- 128128 saves
Works with- Claude Code
- Codex
- Cursor
- and 3 more
FreeSkills
Drizzle ORM best practices with PostgreSQL
- 407407 downloads
- 194194 likes
- 151151 saves
Works with- Claude Code
- Codex
- Cursor
- and 3 more
FreeSkills
SLO design wizard
- 537537 downloads
- 105105 likes
- 242242 saves
Works with- Claude Code
- Codex
- Cursor
- and 3 more
FreeSkills
User stories and sprint fit
- 451451 downloads
- 150150 likes
- 132132 saves
Works with- Claude Code
- Codex
- Cursor
- and 3 more
FreeSkills
Capacity-based sprint plan
- 423423 downloads
- 192192 likes
- 102102 saves
Works with- Claude Code
- Codex
- Cursor
- and 3 more
FreeSkills
Startup CTO advisor
- 580580 downloads
- 201201 likes
- 242242 saves
Works with- Claude Code
- Codex
- Cursor
- and 3 more
FreeSkills
Creating GitHub pull requests with quality checks
- 427427 downloads
- 230230 likes
- 196196 saves
Works with- Claude Code
- Codex
- Cursor
- and 3 more
What you get
- sub-skills/owasp-top-10-mapping.md: mapping to the OWASP Top 10
- sub-skills/critical-security-headers.md: critical security headers
- sub-skills/phase-2-authentication-and-session-security.md: authentication and sessions
Good fit for
- You are preparing a security review and want a structured list
- You need to explain a security risk to your team
Not for
Tags
- vulnerabilities
- owasp
- web security
- reference
About
You say
“Go through the vulnerabilities that affect my authentication API and list the measures to take.”
Skill published by dokhacgiakhoa under the MIT license, delivered in its original version.
Show moreShow less
How to use it
- Install the skill in your agent's skills folder
- Ask your agent to identify and explain the vulnerabilities of a web application
- Review and adjust the result
Content preview
Files
- LICENSE2.4 KB
- NOTICE-PALATEKIT.md0.5 KB
- SKILL.md3.8 KB
- sub-skills/common-assessment-challenges.md0.5 KB
- sub-skills/critical-security-headers.md0.3 KB
- sub-skills/owasp-top-10-mapping.md1 KB
- sub-skills/phase-1-injection-vulnerabilities-assessment.md1.8 KB
- sub-skills/phase-10-client-side-vulnerabilities.md1.3 KB
- sub-skills/phase-11-denial-of-service-assessment.md1.1 KB
- sub-skills/phase-12-server-side-request-forgery.md0.9 KB
- sub-skills/phase-13-additional-web-vulnerabilities.md0.8 KB
- sub-skills/phase-14-mobile-and-iot-security.md1 KB
- sub-skills/phase-15-advanced-and-zero-day-threats.md0.9 KB
- sub-skills/phase-2-authentication-and-session-security.md1.8 KB
- sub-skills/phase-3-sensitive-data-exposure.md1.3 KB
- sub-skills/phase-4-security-misconfiguration.md1.9 KB
- sub-skills/phase-5-xml-related-vulnerabilities.md1.1 KB
- sub-skills/phase-6-broken-access-control.md1.1 KB
- sub-skills/phase-7-insecure-deserialization.md0.9 KB
- sub-skills/phase-8-api-security-assessment.md1.3 KB
- sub-skills/phase-9-communication-security.md1.1 KB
- sub-skills/vulnerability-categories-summary.md1.1 KB
- sub-skills/vulnerability-verification-techniques.md0.8 KB
Origin and licence
Listed unmodified
- Author
- dokhacgiakhoa
- Source
- github.com/dokhacgiakhoa/agent-skills-4-vibe-coding-cli/tree/c4a059bbf7a8d6b2162071f0fbfe74053faa6d20/.agent/skills/top-web-vulnerabilities
- Licence
- MIT
Notice
« Top 100 Web Vulnerabilities Reference » (dokhacgiakhoa, MIT) livré dans sa version d'origine : fiche en français et en anglais par PalateKit.
User reviews
–
No ratings yet
Loading reviews…