security-scanner
OWASP compliance
security
scanner
SKILL.md.claude/skills/security-scanner
GitHubSecurity Scanning Skill
OWASP Top 10
- Access Control - Auth + RBAC
- Cryptographic - HTTPS + encryption
- Injection - Validation + parameterized queries
- Insecure Design - Security by design
- Misconfiguration - Secure headers
- Vulnerable Components - npm audit
- Auth Failures - Strong passwords + MFA
- Integrity - Dependency verification
- Logging - Comprehensive logs
- SSRF - URL validation
Checklist
- All OWASP Top 10 addressed