owasp-security
Implement secure coding practices following OWASP Top 10. Use when preventing security vulnerabilities, implementing authenticati…
What it does
- [ ] Passwords hashed with bcrypt (cost ≥ 12)
- [ ] JWT tokens have short expiry
- [ ] Session cookies are httpOnly, secure, sameSite
- [ ] Rate limiting on auth endpoints
- [ ] All endpoints have auth checks
- [ ] RBAC implemented correctly
- [ ] No IDOR vulnerabilities
Requirements & configuration
- // ✅ Secure token generation
- const token = crypto.randomBytes(32).toString('hex');
- const hashedToken = crypto.createHash('sha256').update(token).digest('hex');
- token: hashedToken,
- await sendEmail(email, Reset link: /reset?token=${token});
Configuration: SELECT
Derived from the skill's own SKILL.md documentation · extracted 2026-07-23
Implement secure coding practices following OWASP Top 10. Use when preventing security vulnerabilities, implementing authentication, securing APIs, or conducting security reviews. Triggers on OWASP, security, XSS, SQL injection, CSRF, authentication security, secure coding, vulnerability.
Source
Repository: https://github.com/hoodini/ai-agents-skills
owasp-security FAQ
What does the owasp-security skill do?
Implement secure coding practices following OWASP Top 10. Use when preventing security vulnerabilities, implementing authentication, securing APIs, or conducting security reviews. Triggers on OWASP, security, XSS, SQL injection, CSRF, authentication security, secure coding, vulnerability. [ ] Passwords hashed with bcrypt (cost ≥ 12) [ ] JWT tokens have short expiry
What does owasp-security require?
// ✅ Secure token generation const token = crypto.randomBytes(32).toString('hex'); const hashedToken = crypto.createHash('sha256').update(token).digest('hex'); token: hashedToken, await sendEmail(email, Reset link: /reset?token=${token}); Configuration keys: SELECT.
How do I install owasp-security?
Run: npx -y skills add https://github.com/hoodini/ai-agents-skills --skill owasp-security --agent claude-code — the source lives at github.com/hoodini/ai-agents-skills.
Maintain owasp-security?
Let people know it's listed here — add the badge (live metrics, light/dark aware) or a plain link to your README or docs.
[owasp-security on getagentictools](https://getagentictools.com/skills/hoodini-ai-agents-skills-owasp-security?ref=badge) npx agentictools info skills/hoodini-ai-agents-skills-owasp-security The second line is the CLI lookup for this page — handy in READMEs and docs.
