Updated 2d ago
by agamm
claude-code-owasp
Claude Code skill for OWASP security best practices (2025-2026). Includes Top 10:2025, ASVS 5.0, Agentic AI security, and 20+ language-specific security quirks.
429 GitHub stars (429)
+52 in 30 days
| Period | New stars |
|---|---|
| Sep 27 | 0 |
| Sep 28 | +1 |
| Sep 29 | +1 |
| Sep 30 | +2 |
| Oct 1 | +1 |
| Oct 2 | +1 |
| Oct 3 | +1 |
| Oct 4 | +1 |
| Oct 5 | +1 |
| Oct 6 | 0 |
| Oct 7 | +1 |
| Oct 8 | 0 |
| Oct 9 | 0 |
| Oct 10 | 0 |
| Oct 11 | 0 |
| Oct 12 | +1 |
| Oct 13 | 0 |
| Oct 14 | 0 |
| Oct 15 | 0 |
| Oct 16 | 0 |
| Oct 17 | +2 |
| Oct 18 | +2 |
| Oct 19 | +2 |
| Oct 20 | +2 |
| Oct 21 | +2 |
| Oct 22 | +2 |
| Oct 23 | +2 |
| Oct 24 | +3 |
| Oct 25 | +2 |
| Oct 26 | +6 |
| Oct 27 | +2 |
| Oct 28 | +11 |
| Oct 29 | +1 |
| Oct 30 | +2 |
| Oct 31 | 0 |
| Nov 1 | +3 |
| Nov 2 | +1 |
| Nov 3 | +3 |
| Nov 4 | +2 |
| Nov 5 | −1 |
| Nov 6 | +2 |
- 1 skill (1 skills found in its SKILL.md files)
- 39 forks (39 forks)
- 2d ago last update (Last updated 2d ago)
Install
Skills CLI
npx skills add agamm/claude-code-owasp
Asks which agents to install it for. Add -g to install it for every project.
Claude Code
git clone https://github.com/agamm/claude-code-owaspcp -r "claude-code-owasp/.claude/skills/owasp-security" ~/.claude/skills/
Copies the owasp-security skill into ~/.claude/skills/ for every project (use .claude/skills/ for one project).
Plugin
/plugin marketplace add agamm/claude-code-owasp
Run inside Claude Code if the repository ships a plugin marketplace, then pick plugins from /plugin.
Skills can run code on your machine — read the SKILL.md first.
What it does
In the author's own words, from each skill's SKILL.md.
-
owasp-security
Reviews code for security vulnerabilities and guides secure implementation using OWASP Top 10:2025, ASVS 5.0, the OWASP Top 10 for LLM Applications (2026), and the OWASP Top 10 for Agentic Applications (2026). Use when reviewing code or a diff for security issues, implementing authentication, authorization, sessions, or cryptography, handling untrusted input, files, or URLs, hardening config, dep…
.claude/skills/ on GitHub (opens in a new tab)owasp-security/ SKILL.md
No skill matches that filter.
Review before you install
A skill is a set of instructions and scripts your agent will follow, and it can run code on your machine. Read the SKILL.md and any scripts first — this listing is not a security review.