Does it provide the actual code to fix the vulnerabilities?

Yes, the skill generates detailed remediation guidance, providing specific code patterns and logic changes required to resolve the identified security gaps.

Which version of OWASP does this skill support?

This skill is specifically calibrated to analyze codebases against the OWASP Top 10 (2021) list of critical web application security risks.

How do I trigger an OWASP scan with this skill?

You can quickly trigger a scan by using the /owasp shortcut or by asking Claude to 'check OWASP compliance' or 'scan for OWASP vulnerabilities'.

Is this skill suitable for continuous integration?

While it is an interactive skill for Claude Code, it is designed to be integrated into your regular development workflow to ensure continuous security monitoring.

Can I scan for specific vulnerabilities instead of a full report?

Absolutely. You can request a focused scan for specific categories, such as 'Check OWASP compliance for SQL injection vulnerabilities'.

OWASP Compliance Checker

Name: OWASP Compliance Checker
Author: jeremylongshore

byjeremylongshore

•

883

セキュリティとテスト

Identifies potential security vulnerabilities based on the OWASP Top 10 (2021) standards and provides actionable remediation guidance.

概要

This specialized skill empowers Claude to perform deep security audits of your codebase against the industry-standard OWASP Top 10 (2021) guidelines. It automates the detection of critical risks like SQL injection, broken access control, and cryptographic failures, generating detailed reports with specific implementation patterns for fixing vulnerabilities. Ideal for developers and security engineers who need to ensure their applications meet high-security standards before deployment or during routine security audits.

主な機能

Actionable remediation patterns and specific code fix suggestions
Automated scanning for all OWASP Top 10 (2021) vulnerability categories
Quick-trigger access via the /owasp command shortcut
Detailed compliance gap analysis with severity ratings
883 GitHub stars
Generation of comprehensive security compliance reports

ユースケース

Remediating specific high-risk security flaws like SQL injection or XSS
Generating compliance documentation for internal security audits and reporting
Pre-deployment security auditing to catch vulnerabilities before they reach production

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add jeremylongshore/claude-code-plugins-plus-skills owasp-compliance-checker

For use in Claude.ai and ChatGPT

Download Skill

GitHub

概要