Claude Cursor Skill

owasp-quick-reference

OWASP Top 10 quick reference: the ten most critical web application security risks (access control, crypto, injection, insecure design, misconfiguration, vulnerable components, auth, integrity, logging, SSRF) each with a one-line mitigation. Load when reviewing code or designs fo

LLM Mart · 0 points · 0 0 0

Virus-scanned Reviewed automatically before listing.

Full trust report

Download goldziher-ai-rulez-internal_builtins_universal_security_skills_owasp-quick-reference-ca967ad.zip · 0 KB

goldziher/ai-rulez 162 16 forks MIT Updated 5h ago

Part of goldziher/ai-rulez — 151 skills

Install

skills CLI

npx skills add https://github.com/Goldziher/ai-rulez/tree/main/internal/builtins/universal/security/skills/owasp-quick-reference

Claude Code claude plugin marketplace add https://llmmart.ai/marketplace.json && claude plugin install goldziher-ai-rulez@llmmart

Git git clone https://github.com/Goldziher/ai-rulez.git

The skills CLI installs just this skill, for any of its supported agents. Claude Code installs the whole goldziher/ai-rulez collection as a plugin from our marketplace. Git is the plain clone.

Skill manifest

Broken Access Control — enforce authorization checks on every request, deny by default.
Cryptographic Failures — use strong standard algorithms, never roll your own crypto.
Injection — parameterize all queries, sanitize and validate all inputs.
Insecure Design — threat model early, validate business logic at every layer.
Security Misconfiguration — harden defaults, disable unnecessary features and endpoints.
Vulnerable Components — keep dependencies updated, audit regularly with language-specific tools.
Authentication Failures — require MFA, enforce strong passwords, implement rate limiting.
Data Integrity Failures — verify software updates, use signed artifacts and checksums.
Logging Failures — log all security events with context, protect log data from tampering.
SSRF — validate and allowlist URLs, restrict outbound network requests.

Files (ai-rulez)

SKILL.md 1.3 KB

---
name: owasp-quick-reference
description: "OWASP Top 10 quick reference: the ten most critical web application security risks (access control, crypto, injection, insecure design, misconfiguration, vulnerable components, auth, integrity, logging, SSRF) each with a one-line mitigation. Load when reviewing code or designs for security vulnerabilities or threat modeling."
---

1. **Broken Access Control** — enforce authorization checks on every request, deny by default.
2. **Cryptographic Failures** — use strong standard algorithms, never roll your own crypto.
3. **Injection** — parameterize all queries, sanitize and validate all inputs.
4. **Insecure Design** — threat model early, validate business logic at every layer.
5. **Security Misconfiguration** — harden defaults, disable unnecessary features and endpoints.
6. **Vulnerable Components** — keep dependencies updated, audit regularly with language-specific tools.
7. **Authentication Failures** — require MFA, enforce strong passwords, implement rate limiting.
8. **Data Integrity Failures** — verify software updates, use signed artifacts and checksums.
9. **Logging Failures** — log all security events with context, protect log data from tampering.
10. **SSRF** — validate and allowlist URLs, restrict outbound network requests.