Best web application vulnerabilities skills, page 3

Houndarr's pytest patterns. An agent skill from av1155/houndarr.

av1155/houndarr

Review Langfuse changes for SSRF, tenant isolation, secret handling, unsafe redirects or uploads, RBAC drift, and client telemetry privacy.

langfuse/langfuse

Django security best practices, authentication, authorization, CSRF protection, SQL injection prevention, XSS prevention, and secure deployment configurations.

affaan-m/ECC

AI governance, EU AI Act compliance, OWASP LLM security, responsible AI practices for GitHub Copilot agents

Hack23/cia

Audit cryptography implementation — algorithm choice, key sizes, KDF parameters, IV/nonce handling, signature verification, randomness, TLS configuration, and key rotation.

briiirussell/cybersecurity-skills

CORS misconfiguration testing for data theft and access control bypass

NeoTheCapt/RedteamAgent

TypeScript monorepo 审查：XSS、SQL 注入、密钥、any、console.log. An agent skill from liuyanghejerry/Clausura.

liuyanghejerry/Clausura

Finds exploitable application security vulnerabilities in code changes.

getsentry/warden

Walks a backend-dev agent through OWASP API Top 10 checks, authentication and authorization patterns, and defense code during API design.

revfactory/harness-100

Scans for security vulnerabilities including XSS, SQL injection, CSRF, and auth flaws using OWASP Top 10 methodology.

proffesor-for-testing/agentic-qe

Security payloads, bypass tables, wordlists, gf pattern names, always-rejected bug list, conditionally-valid-with-chain table, temp email creation scripts, XXE/deserialization/host header injection…

Gabson0x/bountyforge

Security-focused source code review and SAST. An agent skill from transilienceai/communitytools.

transilienceai/communitytools

Guides secure implementation of authentication, authorization, input validation and security headers, with password hashing, parameterized queries and OWASP Top 10 checks.

Jeffallan/claude-skills

Cross-site request forgery testing for state-changing operations

NeoTheCapt/RedteamAgent

Chief Security Officer mode. An agent skill from no-session/pstack.

no-session/pstack

Review Convex security audit patterns for authentication and authorization.

IgorWarzocha/Opencode-Workflows

Django 安全最佳实践、认证、授权、CSRF 防护、SQL 注入预防、XSS 预防和安全部署配置. An agent skill from affaan-m/ECC.

affaan-m/ECC

Laravel security best practices for authn/authz, validation, CSRF, mass assignment, file uploads, secrets, rate limiting, and secure deployment.

affaan-m/ECC

在添加身份验证、处理用户输入、处理机密信息、创建API端点或实现支付/敏感功能时使用此技能。提供全面的安全检查清单和模式。

affaan-m/ECC

Java Spring Boot 服务中认证/授权、验证、CSRF、密钥、标头、速率限制和依赖安全性的 Spring Security 最佳实践。

affaan-m/ECC

Implement secure API design patterns including authentication, authorization, input validation, rate limiting, and protection against common API vulnerabilities

davila7/claude-code-templates

Runs ffuf for DAST work: directory and file discovery, GET and POST parameter fuzzing, virtual host enumeration and filtered, recursive scans.

AgentSecOps/SecOpsAgentKit

Web 安全攻防技术，包括 SQL 注入、XSS、文件上传、命令注入、SSRF、反序列化等常见漏洞的识别与利用. An agent skill from MuWinds/BUUCTF_Agent.

MuWinds/BUUCTF_Agent

Aggiunge a un sito/app un agente di difesa che rileva e blocca richieste malevole (SQL injection, XSS, path traversal, brute force, bot) con rate limiting, blocklist IP e modalità lockdown che…

ccplugins/awesome-claude-code-plugins

Complete reference for 28 web2 bug classes with root causes, detection patterns, bypass tables, exploit techniques, and real paid examples.

Gabson0x/bountyforge

AI-powered security vulnerability detection. An agent skill from selmakcby/claude-agents-skills.

selmakcby/claude-agents-skills

Proactive security audit: OWASP top 10, dependency vulnerabilities, secrets detection, input validation, auth patterns, and secure defaults.

Aedelon/claude-code-blueprint

Review Django security audit patterns for settings and middleware.

IgorWarzocha/Opencode-Workflows

Guide to maintain creating modern and secure code while developing WordPress plugins.

duracelltomi/gtm4wp

Comprehensive AI security verification using OWASP AI Security Verification Standard (AISVS) framework.

OWASP/secure-agent-playbook

Expert 10x engineer with comprehensive knowledge of web development, internet protocols, and web standards.

boshi-xixixi/TraeSkill

認証の追加、ユーザー入力の処理、シークレットの操作、APIエンドポイントの作成、支払い/機密機能の実装時にこのスキルを使用します。包括的なセキュリティチェックリストとパターンを提供します。

affaan-m/ECC

인증 추가, 사용자 입력 처리, 시크릿 관리, API 엔드포인트 생성, 결제/민감한 기능 구현 시 이 스킬을 사용하세요.

affaan-m/ECC

Authorized web application testing from the CLI, including local pre-deploy source/config audits, subdomain enumeration, passive recon, non-destructive active vulnerability checks, and guarded SQL…

ptn1411/skill

当目标为 LLM 应用/Chatbot/智能客服/AI 助手/Copilot/Agent/RAG 知识库/多模态模型，或发现用户输入进入大模型提示、工具调用、知识库检索、对话记忆、文件解析，或需要测试提示词注入/越狱逃逸/System Prompt 泄露/训练数据与敏感信息泄露/RAG 检索污染/Agent 记忆污染/工具滥用与命令执行/SSRF/沙箱逃逸时调用。负责 OWASP LLM…

zhaji2333/CkSKILLS

A skill your agent uses when reviewing code for security vulnerabilities, hardening an application, or deriving security requirements from OWASP/ASVS guidance.

jellydn/my-ai-tools

Audits MCP servers and their client configs for tool poisoning, prompt injection, over-privileged tools, injection bugs, secret leaks and missing approval gates.

awarexone/Agentic-Bug-Hunter

Django security best practices, authentication, authorization, CSRF protection, SQL injection prevention, XSS prevention, and secure deployment configurations.

affaan-m/ECC

Verification loop for Quarkus projects: build, static analysis (Checkstyle, PMD, SpotBugs), tests with JaCoCo coverage, OWASP dependency and container security scans, GraalVM native compilation…

affaan-m/ECC

Fast, template-based vulnerability scanning using ProjectDiscovery's Nuclei with extensive community templates covering CVEs, OWASP Top 10, misconfigurations, and security issues across web…

AgentSecOps/SecOpsAgentKit

SQL injection detection→exploitation→proof for web apps and APIs.

s0ld13rr/pentestcode

Comprehensive security auditing workflow covering web application testing, API security, penetration testing, vulnerability scanning, and security hardening.

davila7/claude-code-templates

安全专家入口。用于 Codex CLI 的 $expert-security 调用. An agent skill from ReJeCtAll/ExpertTeam-Codex.

ReJeCtAll/ExpertTeam-Codex

Perform comprehensive security audit of a repository with detailed findings and step-by-step PoCs.

commercetools/ui-kit

Opens a visible Chromium window on a Kali VM so an operator can complete a manual login or CAPTCHA while the agent watches and acts through the chrome-devtools MCP.

Encod3d-Sec/TORCH

Reference table of per-class false-positive patterns, minimum proof requirements, and impact overclaim traps.

yeswehack/claude-kit

Senior SecOps engineer skill for application security, vulnerability management, compliance verification, and secure development practices.

alirezarezvani/claude-skills

Detect unsafe file handling and path traversal in upload/save/extract flows.

Tencent/AI-Infra-Guard