Skills/Agent Hub
claude-code-owasp
Claude Code skill for OWASP security best practices (2025-2026). Includes Top 10:2025, ASVS 5.0, Agentic AI security, and 20+ language-specific security quirks.
License: MIT
Repository files
- .claude-plugin/marketplace.json
- .claude-plugin/plugin.json
- .claude/skills/owasp-security/SKILL.md
- .claude/skills/owasp-security/reference/config-and-supply-chain.md
- .claude/skills/owasp-security/reference/languages.md
- .claude/skills/owasp-security/reference/owasp-report.md
- .claude/skills/owasp-security/reference/review-checklist.md
- .gitignore
- CLAUDE.md
- LICENSE
- README.md
- evals/conditional-risk-severity/graders/mentions-symlink-risk.md
- evals/conditional-risk-severity/graders/no-high-or-critical.md
- evals/conditional-risk-severity/graders/rates-conditional-risk.md
- evals/conditional-risk-severity/graders/skill-fired.md
- evals/conditional-risk-severity/prompt.md
- evals/idor-with-decoy/graders/finds-idor-skips-decoy.md
- evals/idor-with-decoy/graders/skill-fired.md
- evals/idor-with-decoy/graders/uses-report-format.md
- evals/idor-with-decoy/prompt.md
- evals/ignores-unrelated-request/graders/skill-not-fired.md
- evals/ignores-unrelated-request/prompt.md
- evals/llm-agent-output-handling/graders/finds-core-issue.md
- evals/llm-agent-output-handling/graders/names-2026-core-risk.md
- evals/llm-agent-output-handling/graders/no-2025-pairings.md
- evals/llm-agent-output-handling/graders/skill-fired.md
- evals/llm-agent-output-handling/prompt.md
- evals/safe-code-no-false-positives/graders/no-high-or-critical.md
- evals/safe-code-no-false-positives/graders/no-inflated-findings.md
- evals/safe-code-no-false-positives/graders/skill-fired.md
- evals/safe-code-no-false-positives/prompt.md
- scripts/test-graders.mjs