Can I scan APIs with this skill?

Yes, it supports targeted vulnerability assessments for specific API endpoints to ensure backend security and prevent authorization bypass.

How does it help with remediation?

Every generated report includes a list of identified flaws accompanied by specific, actionable recommendations on how to patch and secure the vulnerabilities.

Does this skill require authorization to scan?

Yes, it is critical to ensure you have explicit legal permission and authorization before scanning any target system or endpoint to avoid legal issues.

What types of vulnerabilities can it detect?

The skill identifies common web flaws including the OWASP Top 10, such as SQL injection, Cross-Site Scripting (XSS), and Cross-Site Request Forgery (CSRF).

Is this skill suitable for automated workflows?

Yes, it can be integrated into development workflows to catch security issues early in the development lifecycle before they reach production.

Web Penetration Testing & Security Audit

Name: Web Penetration Testing & Security Audit
Author: jeremylongshore

byjeremylongshore

•

884

•

セキュリティとテスト

Automates web application security scans and vulnerability assessments to identify OWASP Top 10 threats and security flaws.

This skill empowers developers and security professionals to conduct automated penetration tests directly within their Claude Code environment. By leveraging the penetration-tester plugin, it identifies critical vulnerabilities such as SQL injection, Cross-Site Scripting (XSS), and CSRF, providing detailed reports with risk ratings and actionable remediation guidance. It is an essential tool for teams looking to integrate proactive security auditing into their development lifecycle and ensure robust protection for web applications and API endpoints.

主な機能

01Actionable remediation recommendations for identified flaws

02Detailed security reporting with risk ratings

03Targeted API endpoint security assessments

04Identification of SQLi, XSS, and CSRF vulnerabilities

05Automated vulnerability scanning for OWASP Top 10 risks

06884 GitHub stars

ユースケース

01Performing a full-site security audit before production deployment

02Generating security posture reports for compliance assessments

03Identifying vulnerabilities in specific REST API endpoints

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add jeremylongshore/claude-code-plugins-plus-skills skill-adapter

For use in Claude.ai and ChatGPT

Download Skill