Home / Skills / owasp-security-code-review

owasp-security-code-review

Perform evidence-driven security code reviews across application repositories, services, libraries, and pull requests. Use when Codex needs to audit source code for security flaws, map trust boundaries, verify authentication or authorization, trace untrusted data to sensitive sinks, assess business logic or cryptography, or produce prioritized findings when no narrower language or platform review skill fits.

Scanned · 1 to knowSkillSource: GitHub

718 stars +6 this week Updated 21d ago License Apache-2.0 Context ≈110 tokens always loaded

67popular

Why this score

Stars

13/35

Usage (forks)

4/15

Upkeep

25/25

License

15/15

Owner history

10/10

This repo hosts 10 skills, so its 718 stars are split between them (about 72 each) for scoring.

Popularity score: 67/100 from public GitHub signals only. It shows how widely used and maintained this is, not how well it works. Not included yet: the fake-star check. The security scan is shown separately and doesn't change the score. How we rank

Security

Scanned Oct 21, 2026 at commit 6d3e215d26cd, with Cisco's open-source skill-scanner.

What its code does:

Runs shell commands Common for dev tools. Read the commands it runs.references/owasp-os-command-injection.md:32 and 1 more

A scan lists patterns in the code. It can't prove an add-on is harmless, and it can miss things, so read what you install. How we scan

Alternatives

Other makers' add-ons that do the same job, next to this one.

Name	Score	Stars	Context	Updated
This oneowasp-security-code-review SpecterOps/skills · Skill	67	★ 718	≈110 always	21d ago
owasp-security agamm/claude-code-owasp · Skill Both about owasp and security	70	★ 386	≈118 always	1mo ago
09-web-security Masriyan/Claude-Code-CyberSecurity-Skill · Skill Both about security and owasp	66	★ 490	≈21 always	19d ago
code-review ThinkInAIXYZ/deepchat · Skill Both about security	78	★ 6.4k	≈26 always	16d ago
agent-owasp-compliance github/awesome-copilot · Skill Both about owasp and security	87	★ 40k	≈29 always	16d ago
code-review-context openinterpreter/openinterpreter · Skill	89	★ 69k	≈10 always	25d ago

Install

mkdir -p .claude/skills/owasp-security-code-review

curl -sL https://codeload.github.com/SpecterOps/skills/tar.gz/6d3e215d26cd908859086c194205cbd9d5a638b7 | tar -xz -C .claude/skills/owasp-security-code-review --strip-components=3 "skills-6d3e215d26cd908859086c194205cbd9d5a638b7/skills/owasp-security-code-review"

To remove it later:

rm -rf .claude/skills/owasp-security-code-review

npx skills add SpecterOps/skills --skill owasp-security-code-review

Pinned to commit 6d3e215d26cd as listed by GitHub.

Context cost: ≈110 tokens loaded every session (name and description), plus ≈2.3k tokens when the skill is used.

The Claude Code command downloads this skill folder at the pinned commit into .claude/skills/. The Skills CLI (npx skills) works with many agents but can't pin a version, so it installs whatever is current.

Used for

Engineering › Code review Engineering › Git & GitHub Security › Security review

Facts

Repo: SpecterOps/skills
Stars: 718
Forks: 82
Last push: 2026-10-14 (21d ago)
License: Apache-2.0
Owner: SpecterOps · since 2017
Language: Python
Works with: Claude Code, Skills CLI