📦
content-creator
88Create Brand-Consistent Marketing Content
Marketing teams need content that stays consistent across channels. This skill helps plan, write, analyze, and optimize content for brand voice and SEO.
Writing & Content View
Skills top-100-web-vulnerabilities-reference
📦
top-100-web-vulnerabilities-reference
v1.1 Content revision r1 Safe ⚙️ External commands
Assess Web Vulnerabilities with a Top 100 Reference
Teams need consistent language for common web security flaws. This skill provides a structured OWASP-aligned reference with causes, impacts, and mitigations.
Supports: Claude Codex Code(CC)
Install with my Agent
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Agent request
Review the Skillstore skill "top-100-web-vulnerabilities-reference" from https://skillstore.io/skills/sickn33-top-100-web-vulnerabilities-reference.md and its manifest at https://skillstore.io/api/skills/sickn33-top-100-web-vulnerabilities-reference/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Test it
Using "top-100-web-vulnerabilities-reference". Explain SSRF risk for an image URL feature.
Expected outcome:
SSRF occurs when a server fetches user-controlled URLs without validation. Key controls include allowlists, egress filtering, and blocked metadata endpoints.
Using "top-100-web-vulnerabilities-reference". Create a checklist for API key exposure.
Expected outcome:
- Check repositories and client bundles for exposed keys.
- Confirm keys are stored in managed secret storage.
- Verify rotation, least privilege, and monitoring are enabled.
Using "top-100-web-vulnerabilities-reference". Map missing authorization on document access.
Expected outcome:
This aligns with IDOR and broken access control. The likely root cause is missing object-level authorization on each request.
Security Audit
Safev4 • 7/7/2026 Open versioned report
The detected command and reconnaissance patterns are false positives from defensive vulnerability reference text and markdown formatting. SKILL.md provides definitions, impacts, and mitigations, with no executable commands, network calls, prompt injection text, or audit bypass instructions.
1
Files scanned
544
Lines analyzed
0
Review items
0
False positives ignored
Risk Factors
⚙️ External commands (1)
No confirmed security findings were detected by the latest completed static and semantic audit. This does not prove the skill has no side effects.
Audited by: codex View Audit History →
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
Copy report link
https://skillstore.io/skills/sickn33-top-100-web-vulnerabilities-reference/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown badge
[](https://skillstore.io/skills/sickn33-top-100-web-vulnerabilities-reference?utm_source=security_passport_badge)HTML badge
<a href="https://skillstore.io/skills/sickn33-top-100-web-vulnerabilities-reference?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/sickn33-top-100-web-vulnerabilities-reference/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Embed card
<iframe src="https://skillstore.io/embed/skills/sickn33-top-100-web-vulnerabilities-reference.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Academic citations (APA · BibTeX · CFF)
APA citation
sickn33. (2026). top-100-web-vulnerabilities-reference security audit report (audit version 4) [Author version 1.1]. Skillstore. https://skillstore.io/skills/sickn33-top-100-web-vulnerabilities-reference/audits/4BibTeX citation
@techreport{sickn33-sickn33-top-100-web-vulnerabilities-reference-2026,
author = {sickn33},
title = {top-100-web-vulnerabilities-reference security audit report (audit version 4)},
institution = {Skillstore},
year = {2026},
number = {4},
url = {https://skillstore.io/skills/sickn33-top-100-web-vulnerabilities-reference/audits/4},
note = {Author version 1.1}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "top-100-web-vulnerabilities-reference security audit report (audit version 4)"
version: "1.1"
type: report
authors:
- name: "sickn33"
date-released: "2026-07-07"
url: "https://skillstore.io/skills/sickn33-top-100-web-vulnerabilities-reference/audits/4"
identifiers:
- type: other
value: "skillstore:sickn33-top-100-web-vulnerabilities-reference:audit:4"
description: "Skillstore immutable audit report identifier"
Skillstore Score
Why this score Evidence Confidence: High 55
Architecture
85
Maintainability
87
Content
69
Community
78
Spec Compliance
What You Can Build
Build Assessment Checklists
Create structured review checklists from the vulnerability categories, impacts, and control guidance.
Plan Secure Fixes
Match a suspected flaw to likely root causes and practical mitigation patterns.
Standardize Review Language
Use shared terminology for security reviews, remediation planning, and training materials.
Try These Prompts
Explain a Vulnerability Category
Explain the authentication vulnerabilities in this reference. Include root causes, likely impacts, and common mitigations.
Create a Review Checklist
Create a concise checklist for reviewing access control issues in a web application using this reference.
Map a Finding to Controls
Map this finding to the closest vulnerability type in the reference and suggest practical controls: [describe finding].
Prioritize a Security Program
Group these application risks by category, likely business impact, and remediation priority using the reference: [paste risk list].
Best Practices
- Use the reference to classify risks before writing remediation tasks.
- Pair each vulnerability type with concrete evidence from the reviewed system.
- Validate mitigations against the application architecture and threat model.
Avoid
- Do not treat the list as proof that a system is vulnerable.
- Do not run security tests without clear authorization.
- Do not replace current vendor advisories with this static reference.
Frequently Asked Questions
Does this skill scan applications?
No. It provides reference guidance for understanding and organizing web vulnerability analysis.
Is the reference aligned with OWASP?
Yes. It includes an OWASP Top 10 2021 mapping and related vulnerability categories.
Can developers use it for remediation?
Yes. Each vulnerability entry includes root causes, impacts, and mitigation guidance.
Can it replace a penetration test?
No. It supports analysis and planning, but it does not perform testing or validate live systems.
Does it include API security topics?
Yes. It covers insecure endpoints, exposed API keys, rate limiting, and related API risks.
Which AI tools can use it?
The report lists support for Claude, Codex, and Claude Code.
Developer Details
Author
sickn33License
MIT
Author version
v1.1
Skillstore revision
r1
Version notice
The author-declared version is not valid SemVer.
Ref
9f814fc6a43fd99946f2da5e0df231c65a38bc76
Maintenance freshness
7/18/2026
Usage
7 downloads · 101 views
File structure
📄 SKILL.md
More from sickn33
View all📦
prompt-engineering-patterns
85Improve LLM Prompts With Proven Patterns
Inconsistent prompts waste time and make AI outputs hard to trust. This skill guides prompt design with reusable patterns, examples, evaluation steps, and optimization workflows.
Productivity View
📦
senior-architect
81Review Architecture Workflows and Project Paths
Architecture reviews need a consistent starting point and clear project boundaries. This skill provides workspace-scoped tool templates, command examples, and generic design references.
Coding & Development View
📦
senior-fullstack
81Review Fullstack Project Foundations
Fullstack project setup can require many tools and checks. This skill provides basic local wrappers, common commands, and general engineering guidance.
Coding & Development View
📦
prompt-engineer
81Optimize AI Prompts With Prompt Engineer
Writing clear prompts is hard when goals are vague or complex. This skill turns rough requests into structured prompts using proven prompt frameworks.
Productivity View
📦
product-manager-toolkit
80Prioritize Product Work With Research Insights
Product teams need faster ways to rank features, synthesize interviews, and document decisions. This skill provides RICE scoring, interview analysis, and PRD templates for structured planning.
Productivity View
Related Skills
View all📦
security-and-hardening
78Harden Applications Against Security Risks
by addyosmani
Security reviews can miss trust boundaries and unsafe data flows. This skill supplies threat-modeling prompts, OWASP patterns, and practical review checklists.
Security & Compliance View
📦
python-web-app-security-audit
90Audit Python Web Apps Before Release
by glenskii
Python teams need repeatable checks for common application security controls. This skill provides configurable pytest coverage with clear evidence, boundaries, and release decisions.
Security & Compliance View
📦
security-sentinel
79Audit Code for Security Risks
by Barnhardt-Enterprises-Inc
Security-sensitive code is easy to ship with hidden flaws in authentication, input handling, and secrets. This skill gives Claude, Codex, and Claude Code structured security references and scanner guidance for safer reviews.
Security & Compliance View
📦
security-guardian
78Review Application Security Risks
by Bikach
Security reviews can miss issues across authentication, input handling, APIs, and secrets. This skill provides structured guidance, checklists, and remediation patterns for application-security work.
Security & Compliance View
📦
security-fundamentals
78Review Code for Security Fundamentals
by DanielPodolsky
Security mistakes often appear in common areas like authentication, authorization, input handling, and data exposure. This skill gives Claude, Codex, and Claude Code a focused checklist for finding those risks during review.
Security & Compliance View
📦
security-checklist
50Audit Applications with an OWASP Security Checklist
by ArieGoldkin
Security reviews can miss common vulnerabilities and inconsistent controls. This skill provides structured OWASP checks, secure examples, and scanning workflows for repeatable assessments.
Security & Compliance View