Updated 3w ago
by agamm
claude-code-owasp
Claude Code skill for OWASP security best practices (2025-2026). Includes Top 10:2025, ASVS 5.0, Agentic AI security, and 20+ language-specific security quirks.
378 GitHub stars (378)
+11 in 20 days
| Period | New stars |
|---|---|
| Sep 27 | 0 |
| Sep 28 | +1 |
| Sep 29 | +1 |
| Sep 30 | +2 |
| Oct 1 | +1 |
| Oct 2 | +1 |
| Oct 3 | +1 |
| Oct 4 | +1 |
| Oct 5 | +1 |
| Oct 6 | 0 |
| Oct 7 | +1 |
| Oct 8 | 0 |
| Oct 9 | 0 |
| Oct 10 | 0 |
| Oct 11 | 0 |
| Oct 12 | +1 |
| Oct 13 | 0 |
| Oct 14 | 0 |
| Oct 15 | 0 |
| Oct 16 | 0 |
- 1 skill (1 skills found in its SKILL.md files)
- 35 forks (35 forks)
- 3w ago last update (Last updated 3w ago)
Install
Skills CLI
npx skills add agamm/claude-code-owasp
Asks which agents to install it for. Add -g to install it for every project.
Claude Code
git clone https://github.com/agamm/claude-code-owaspcp -r "claude-code-owasp/.claude/skills/owasp-security" ~/.claude/skills/
Copies the owasp-security skill into ~/.claude/skills/ for every project (use .claude/skills/ for one project).
Plugin
/plugin marketplace add agamm/claude-code-owasp
Run inside Claude Code if the repository ships a plugin marketplace, then pick plugins from /plugin.
Skills can run code on your machine — read the SKILL.md first.
What it does
In the author's own words, from each skill's SKILL.md.
-
owasp-security
Reviews code for security vulnerabilities and guides secure implementation using OWASP Top 10:2025, ASVS 5.0, the OWASP Top 10 for LLM Applications (2026), and the OWASP Top 10 for Agentic Applications (2026). Use when reviewing code or a diff for security issues, implementing authentication, authorization, sessions, or cryptography, handling untrusted input, files, or URLs, hardening config, dep…
.claude/skills/owasp-security/SKILL.md on GitHub (opens in a new tab)
No skill matches that filter.
Review before you install
A skill is a set of instructions and scripts your agent will follow, and it can run code on your machine. Read the SKILL.md and any scripts first — this listing is not a security review.