Skills top-web-vulnerabilities
📦

top-web-vulnerabilities

v1.1 Content revision r1 Safe ⚙️ External commands

Assess Common Web Vulnerabilities

Web teams need a consistent way to recognize common application risks. This skill provides a structured vulnerability reference with causes, impacts, and mitigations.

Supports: Claude Codex Code(CC)
🥉 77 Bronze

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "top-web-vulnerabilities" from https://skillstore.io/skills/sickn33-top-web-vulnerabilities.md and its manifest at https://skillstore.io/api/skills/sickn33-top-web-vulnerabilities/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/sickn33-top-web-vulnerabilities.md Signed manifest GET /api/skills/sickn33-top-web-vulnerabilities/manifest Signed lockfile GET /api/skills/sickn33-top-web-vulnerabilities/lockfile

Test it

Using "top-web-vulnerabilities". Explain the risk from missing object-level authorization in a customer portal.

Expected outcome:

The skill identifies this as an access control issue related to IDOR. It explains that missing object checks can expose other users' records and recommends server-side authorization on every object request.

Using "top-web-vulnerabilities". Create a checklist for reviewing API security before launch.

Expected outcome:

The skill produces a checklist covering authentication, authorization, input validation, rate limiting, API key storage, HTTPS, and logging. Each item links to likely impacts and mitigation themes.

Using "top-web-vulnerabilities". Map common scanner findings to OWASP Top 10 themes.

Expected outcome:

The skill groups findings such as injection, broken access control, cryptographic failures, security misconfiguration, and SSRF into the matching OWASP categories with remediation priorities.

Security Audit

Safe
v5 • 7/7/2026 Open versioned report

All static findings were false positives from defensive reference text, markdown tables, or HTTP header examples. The reviewed skill does not execute commands, make network requests, access local secrets, or include prompt-injection text. No semantic security findings were identified.

1
Files scanned
549
Lines analyzed
0
Review items
0
False positives ignored

Risk Factors

⚙️ External commands (1)
SKILL.md:473-481
No confirmed security findings were detected by the latest completed static and semantic audit. This does not prove the skill has no side effects.
Audited by: codex View Audit History →
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/sickn33-top-web-vulnerabilities/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/sickn33-top-web-vulnerabilities/security.svg)](https://skillstore.io/skills/sickn33-top-web-vulnerabilities?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/sickn33-top-web-vulnerabilities?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/sickn33-top-web-vulnerabilities/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/sickn33-top-web-vulnerabilities.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA · BibTeX · CFF)

APA citation

sickn33. (2026). top-web-vulnerabilities security audit report (audit version 5) [Author version 1.1]. Skillstore. https://skillstore.io/skills/sickn33-top-web-vulnerabilities/audits/5

BibTeX citation

@techreport{sickn33-sickn33-top-web-vulnerabilities-2026, author = {sickn33}, title = {top-web-vulnerabilities security audit report (audit version 5)}, institution = {Skillstore}, year = {2026}, number = {5}, url = {https://skillstore.io/skills/sickn33-top-web-vulnerabilities/audits/5}, note = {Author version 1.1} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "top-web-vulnerabilities security audit report (audit version 5)" version: "1.1" type: report authors: - name: "sickn33" date-released: "2026-07-07" url: "https://skillstore.io/skills/sickn33-top-web-vulnerabilities/audits/5" identifiers: - type: other value: "skillstore:sickn33-top-web-vulnerabilities:audit:5" description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: High
55
Architecture
85
Maintainability
87
Content
68
Community
78
Spec Compliance

What You Can Build

Plan Web App Assessments

Build a structured review plan that covers injection, authentication, access control, API, and configuration risks.

Review Secure Coding Risks

Compare application features against common root causes and select practical mitigation options.

Create Risk Checklists

Turn the vulnerability catalog into review questions for releases, audits, or internal security standards.

Try These Prompts

Explain a Category 
Use this skill to explain injection vulnerabilities, including common root causes, user impact, and practical mitigations.
Build a Review Checklist 
Use this skill to create a web security checklist for an application with login, file upload, API access, and admin functions.
Map Findings to OWASP 
Use this skill to map these findings to OWASP Top 10 categories and summarize the main remediation themes.
Prioritize a Remediation Plan 
Use this skill to prioritize remediation for authentication, access control, SSRF, and API issues based on impact and likely exploitability.

Best Practices

  • Use the catalog to frame questions before testing a live application.
  • Confirm every suspected issue with authorized, environment-appropriate validation.
  • Adapt mitigation guidance to the application's framework, data sensitivity, and deployment model.

Avoid

  • Treating the catalog as proof that a vulnerability exists without verification.
  • Running intrusive tests against systems without explicit authorization.
  • Applying generic mitigations without reviewing architecture and business logic.

Frequently Asked Questions

Does this skill scan an application automatically?
No. It provides structured reference material and assessment guidance for authorized review work.
Can developers use it during code review?
Yes. Developers can compare features against common root causes and select mitigation patterns.
Does it replace a penetration test?
No. It supports planning and analysis, but skilled manual testing is still required.
Does it include OWASP Top 10 mapping?
Yes. It maps major vulnerability groups to OWASP Top 10 2021 categories.
Can it help with remediation planning?
Yes. It lists likely impacts and mitigation themes that can inform remediation priority.
What authorization is needed before using it?
Use it only for systems where you have explicit permission to assess security.

Developer Details

Author

sickn33

License

MIT

Author version

v1.1

Skillstore revision

r1

Version notice

The author-declared version is not valid SemVer.

Repository

https://github.com/sickn33/antigravity-awesome-skills/tree/main/skills/top-web-vulnerabilities

Ref

9f814fc6a43fd99946f2da5e0df231c65a38bc76

Maintenance freshness

7/18/2026

Usage

8 downloads · 98 views

File structure

📄 SKILL.md