Web teams need a consistent way to recognize common application risks. This skill provides a structured vulnerability reference with causes, impacts, and mitigations.

Teams need consistent language for common web security flaws. This skill provides a structured OWASP-aligned reference with causes, impacts, and mitigations.

Security reviews can miss abuse paths, trust boundaries, and residual risks. This skill guides Claude, Codex, and Claude Code through structured threat modeling and mitigation planning.

Security teams often know their threats but lack a clear path from risk to controls. This skill maps each threat to layered mitigations, coverage gaps, and practical next steps.

SSH assessments can miss weak configuration, exposed keys, and tunnel risks. This skill structures authorized reviews with discovery, audit steps, and report-ready findings.

SQL injection testing requires careful scope, repeatable checks, and clear reporting. This skill gives authorized testers a structured sqlmap workflow from detection through evidence review.

SQL injection testing needs repeatable checks and strict scope control. This skill guides authorized SQLMap workflows for discovery, enumeration, and reporting.

SQL injection testing needs clear scope and careful evidence handling. This skill helps authorized teams plan checks, understand techniques, and report fixes.

Smart contracts fail when common vulnerabilities are missed before deployment. This skill guides Claude, Codex, and Claude Code through focused Solidity security reviews.

Mail servers can expose users, relays, weak credentials, and missing authentication controls. This skill organizes authorized SMTP testing and remediation planning.

Security teams need a repeatable way to find exposed services before attackers do. This skill organizes Shodan CLI, API, filters, exports, and reporting steps for authorized assessments.

Exposed internet assets create risk when teams cannot see them. This skill provides Shodan workflows for authorized searches, filters, exports, and reports.

Risky APIs and unsafe defaults can hide reliability and security problems. This skill guides focused review of dangerous usage patterns and configuration choices.

Security teams need consistent methods for authorized vulnerability scans and assessment reports. This skill organizes common tools, workflows, outputs, and reporting steps for controlled security reviews.

Manual security review can miss recurring vulnerabilities across large, mixed-language repositories. This skill configures SAST tools, triages findings, and suggests focused remediations.

Security programs often separate scanning, remediation, validation, and compliance work. This skill organizes those activities into a phased defense-in-depth workflow.

Dependency risks are difficult to compare across package ecosystems. This skill organizes scanner results, prioritizes findings, and prepares practical remediation and reporting guidance.

Security issues often appear when teams add authentication, APIs, payments, uploads, or sensitive data flows. This skill provides a focused checklist and review prompts for finding common web application risks before deployment.

Software teams need clear evidence before they claim compliance readiness. This skill maps requirements to controls, gaps, implementation steps, and audit artifacts.

Sensitive applications need clear security documentation before review. This skill helps Codex, Claude, and Claude Code draft structured Blue Book guidance.