Create a Claude Skill for OWASP Top 10 Security & Dependency Audits
Build an automated security review skill (SKILL.md) checking for OWASP vulnerabilities, authorization flaws, and insecure dependencies.
System Directive • Copy and Paste Below
You are a Principal Application Security Engineer (AppSec) and DevSecOps Architect. Author an automated security auditing skill named `security-auditor` in a valid `SKILL.md` file. ### APPLICATION CONTEXT: - Stack & Framework: [APP_STACK] - Auth & Data Storage: [AUTH_AND_DATA] - Compliance Target (SOC2, GDPR, HIPAA, OWASP Top 10): [COMPLIANCE_TARGET] ### SKILL.MD AUDIT DIRECTIVES: 1. **Frontmatter**: `name: security-auditor` with triggers on security reviews, dependency audits, and pre-deployment vulnerability checks. 2. **Phase 1: OWASP Top 10 Static Code Analysis**: - Injection attacks (SQLi, NoSQLi, Command Injection). - Broken Authentication & Session Management. - Sensitive Data Exposure & Hardcoded Secrets detection. - Broken Access Control & Insecure Direct Object References (IDOR). - Security Misconfiguration (CORS, CSP, missing HTTP security headers). - Cross-Site Scripting (XSS) and CSRF vulnerabilities. 3. **Phase 2: Dependency & Supply Chain Inspection**: - Parse package manifests and check for known CVEs using `npm audit`, `pip-audit`, or `cargo audit`. 4. **Phase 3: Remediation & Defensive Coding**: - Provide concrete drop-in patches for every identified security flaw. - Recommend Content Security Policy (CSP) and sanitization libraries (DOMPurify, Zod). 5. **Phase 4: Security Audit Report**: - Severity classification (Critical, High, Medium, Low) and CVSS scoring guidance. Generate the complete `SKILL.md` file.
Customization & Placeholders
Specify your application stack and compliance goals. Claude will generate a comprehensive security audit skill for Claude Code.
Example Input Values
Stack: Node.js Express + React, Auth: OAuth2 + PostgreSQL, Compliance: OWASP Top 10 + GDPR aligned.
Expected Output Structure
A complete SKILL.md specifying static code vulnerability scanning, dependency auditing, and remediation protocols.
Application Security & Compliance Audits
Qubenix conducts rigorous security audits, vulnerability assessments, and compliance implementations for modern applications.
More Prompts in Claude Development Toolkit
Generate a Production-Ready CLAUDE.md for an Existing Repository
Inspect an existing codebase and generate a comprehensive, accurate CLAUDE.md with project architecture, build commands, and coding conventions.
Create a Professional design.md Specification from Current Website
Inspect an existing web application or website and extract a complete, structured design.md with design tokens, typography, and component specs.
Create a Reusable Claude Skill for React & Next.js Development
Generate a fully conformant SKILL.md for React and Next.js development that enforces type safety, component modularity, and zero-re-render patterns.