Does it provide security guidance for AI agents?

Absolutely. It features a dedicated Agentic AI security section covering goal hijacking, tool misuse, privilege abuse, and prompt injection mitigation.

Can this skill help prevent SQL injection and XSS?

Yes, it provides specific secure coding patterns and checklists to identify and prevent injection attacks, cross-site scripting, and other common web vulnerabilities.

Is the security advice language-specific?

The skill offers tailored security advice for Python, JavaScript, TypeScript, and SQL, highlighting language-specific quirks like prototype pollution or pickle deserialization.

Which OWASP version does this skill support?

This skill is updated to support the OWASP Top 10:2025 standards and includes emerging security guidelines for Agentic AI systems for 2026.

OWASP Security Best Practices

Name: OWASP Security Best Practices
Author: nikhillinit

bynikhillinit

0•

安全与测试

Integrates industry-standard OWASP security principles and secure coding patterns into your development and code review workflows.

The OWASP Security Best Practices skill transforms Claude into a security-aware development partner by applying the latest OWASP Top 10:2025 standards and ASVS 5.0 requirements. It provides actionable guidance for identifying and mitigating vulnerabilities such as SQL injection, broken access control, and cryptographic failures across various languages including Python, JavaScript, and SQL. Beyond traditional web security, it incorporates forward-looking protections for Agentic AI (OWASP 2026), helping developers harden AI-driven systems against prompt injection, tool misuse, and goal hijacking while ensuring robust authentication and data protection throughout the software lifecycle.

主要功能

01ASVS 5.0 compliance guidance for levels 1, 2, and 3

02Secure coding patterns for Python, JavaScript, TypeScript, and SQL

03Specialized security checklists for Agentic AI and LLM-based systems

04Comprehensive OWASP Top 10:2025 vulnerability detection and prevention

05Deep-dive analysis of language-specific quirks and memory model risks

060 GitHub stars

使用场景

01Performing automated security audits during the code review process

02Architecting secure AI agent systems with sandboxing and tool safety

03Implementing hardened authentication and authorization modules

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add nikhillinit/updog_restore owasp-security

For use in Claude.ai and ChatGPT

主要功能

01ASVS 5.0 compliance guidance for levels 1, 2, and 3

02Secure coding patterns for Python, JavaScript, TypeScript, and SQL

03Specialized security checklists for Agentic AI and LLM-based systems

04Comprehensive OWASP Top 10:2025 vulnerability detection and prevention

05Deep-dive analysis of language-specific quirks and memory model risks

060 GitHub stars

使用场景

01Performing automated security audits during the code review process

02Architecting secure AI agent systems with sandboxing and tool safety

03Implementing hardened authentication and authorization modules