Security

owasp-security-reviewer

by rachid hakim
1v1.0.0
Free

About this skill

Review code against the OWASP Top 10 and get a prioritized, evidence-based report. Flags injection, broken access control, cryptographic failures, SSRF, and misconfiguration, with the exact file and line, the exploit scenario, and a concrete fix for each finding. Includes severity scoring and a remediation checklist. No account, no API key.

Getting started

New to AgentPowers? Learn how to install and use skills - no coding experience required.

How It Works

Step-by-step guide to installing and using skills. Chat-based or terminal - your choice.

Documentation

Full CLI reference, MCP plugin setup, and API docs for developers.

Reviews (0)

More Security Skills

Security

Hikvision NVR

Skill · by Dan Jones

Ask your AI agent for the Hikvision footage you need, then walk away while it downloads. Pulling video off a Hikvision DVR or NVR usually means web-UI menus, ISAPI XML, ffmpeg flags, and "why is this video broken" troubleshooting. This skill removes all of it. Once your NVRs are registered, you just tell your agent "pull the lobby camera from 8 to 9 PM yesterday" and a clean MP4 lands in your downloads folder. Speaks Hikvision's ISAPI natively, falls back to RTSP when the NVR throttles, works around firmware quirks that return wrong segment data, clips to the exact time window you asked for, and verifies the output (codec, resolution, duration, on-screen timestamp). Credentials live in your OS keychain, never on command lines or in logs. Validated on DS-9016HWI-ST, DS-7316HQHI-SH, DS-7716NI-I4/16P, DS-9632NI-ST, and DS-7716NI-SP/16 with firmware V3.1.10 through V4.50.000.

New$25
Security

AgentPass Local

Skill · by Romeo Apps

Install a local credential broker with a desktop GUI, allowed-domain policy checks, and OS-protected sensitive fields. Use it when an approved agent workflow needs a narrow login or API handoff without putting passwords, tokens, recovery codes, or payout details into chat, logs, screenshots, or repositories.

New$14
Security

claw-auditor

Skill · by rachid hakim

Audit an OpenClaw or ClawHub skill before you install it. Statically inspects the package for red flags: unsafe shell execution, exfiltration paths, over-broad file access, prompt-injection patterns, obfuscated payloads, and missing provenance. Returns a risk score with per-finding evidence and a clear install or reject verdict.

NewFree