Can I use this for API security assessments?

Absolutely. It includes specific sections for API security, including unprotected endpoints, broken object-level authorization, and insecure data exposure.

How does this skill help with security audits?

It provides a structured framework to check for 100 different vulnerability types, ensuring comprehensive coverage during manual or automated security reviews.

Does it provide code-level mitigation examples?

Yes, for each vulnerability, the skill offers specific remediation strategies such as implementing parameterized queries, output encoding, or proper security headers.

Is the content aligned with industry standards?

Yes, the vulnerability taxonomy is closely aligned with OWASP standards and reflects real-world attack patterns encountered in modern web applications.

Who is this skill designed for?

It is designed for web developers, security engineers, and quality assurance testers who need a reliable reference for building and testing secure applications.

Top 100 Web Vulnerabilities Reference

Name: Top 100 Web Vulnerabilities Reference
Author: claudiodearaujo

byclaudiodearaujo

安全与测试

Provides a comprehensive guide to identifying, understanding, and mitigating the top 100 web application security vulnerabilities.

关于

This skill serves as a master reference for web security, offering deep dives into the 100 most critical vulnerabilities across 15 major categories, including injection attacks, broken access control, and security misconfigurations. It enables developers and security professionals to systematically assess risks by providing clear definitions, root cause analyses, and actionable remediation strategies aligned with industry standards like OWASP, ensuring more secure software development and robust defense-in-depth strategies.

主要功能

0 GitHub stars
Detailed definitions and root cause analysis for 100+ vulnerabilities
Comprehensive coverage of web, API, and mobile-related security flaws
Impact assessments to help prioritize remediation efforts
Categorized taxonomy for systematic security audits and assessments
Actionable mitigation strategies and secure coding best practices

使用场景

Developing vulnerability assessment checklists for penetration testing
Conducting structured security code reviews to identify potential flaws
Learning about complex attack vectors like SSRF, XXE, and insecure deserialization

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add claudiodearaujo/sistema-de-narra-o-de-livro-front top-web-vulnerabilities

For use in Claude.ai and ChatGPT

Download Skill

GitHub

关于