{"$schema":"https://top-agent-skills.com/schemas/skill.v1.json","name":"code-review-security","slug":"owasp-security-skills","canonical":"https://top-agent-skills.com/skill/owasp-security-skills","description":"Security-focused code review mapped to OWASP Top 10 and ASVS. Use when reviewing pull requests, auditing files or modules for vulnerabilities, or performing pre-merge security gate checks. Covers injection, auth, authorization, cryptography, data exposure, misconfiguration, and deserialization. The same plugin bundle adds sca-audit for dependency CVEs, secrets-scan for credential exposure, and multi-agentic-threat-model for threat modelling multi-agent systems against the CSA MAESTRO framework.","tagline":"OWASP-published review, SCA, secrets and threat-modelling skills — the most citable provenance available for security review vocabulary.","bestFor":"Pre-merge security gates mapped to a standard a reviewer can cite, and threat modelling multi-agent systems against the OWASP Multi-Agentic guide and CSA MAESTRO layers.","notIdealFor":"Vendoring into a product. The bundle is CC-BY-4.0 — a content licence, not a software licence — so check your obligations before redistributing the rules.","publisher":{"name":"OWASP Foundation","url":"https://owasp.org","tier":"verified-org"},"license":"CC-BY-4.0","isOpenSource":true,"surfaces":["claude-code"],"compatibility":["claude-code"],"capabilityLevel":"read-only","setup":{"time":"3 min","complexity":"Low"},"install":[{"agent":"claude-code","command":"/plugin marketplace add OWASP/secure-agent-playbook","manual":null,"followUp":"Then /plugin install code-security-skills@agent-security-playbook (and ai-security-skills@agent-security-playbook for the threat-modelling set)."}],"taxonomy":{"primaryCategories":["security-auditing","code-quality-review"],"verticalCategories":["security","engineering"],"tags":["OWASP","Threat modeling","ASVS"],"filters":["verified-org","plugin-install","read-only","bundles-scripts","agent-friendly","works-with-claude-code"]},"links":{"github":"https://github.com/OWASP/secure-agent-playbook/tree/main/plugins/code-security-skills","docs":"https://github.com/OWASP/secure-agent-playbook/blob/main/plugins/code-security-skills/skills/code-review-security/SKILL.md","website":null},"_meta":{"score":{"value":49,"rubric":"1.0","inputs":{"installCount":0,"provenance":12.8,"githubStars":6.2,"recency":6,"compatibility":2,"documentation":10,"installErgonomics":7,"license":4.3,"verification":0.5}},"stats":{"installCount":null,"githubStars":149,"lastUpdated":"2026-06-02","verifiedAt":null}}}