Perform OWASP Top 10 static security audit identifying vulnerabilities in access control, cryptography, injection, configuration, and logging. Activate when user mentions "security audit", "OWASP", "security scan", "vulnerabilities", "auditar seguridad".
Scanned 9/12/2026
Install to Claude Code
Skills Directorynpx -y skills add aibot88/sec_skill_store --skill doncheli-security --agent claude-codeInstalls into .claude/skills of the current project.
Are you the author of Doncheli Security?
Add the live security badge to your README — it updates automatically with every re-scan.
[](https://www.skillsdirectory.com/skills/aibot88-doncheli-security)More formats (shields.io, HTML) on the badges page.
---
name: doncheli-security
description: Perform OWASP Top 10 static security audit identifying vulnerabilities in access control, cryptography, injection, configuration, and logging. Activate when user mentions "security audit", "OWASP", "security scan", "vulnerabilities", "auditar seguridad".
---
# Don Cheli: OWASP Security Audit
## Categories
- A01: Broken Access Control — endpoints without auth, IDOR, CORS
- A02: Cryptographic Failures — plaintext passwords, JWT without expiration
- A03: Injection — SQL, XSS, command injection
- A04: Insecure Design — missing validation, bypassable business logic
- A05: Security Misconfiguration — debug mode, default credentials, missing headers
- A06: Vulnerable Components — dependencies with known CVEs
- A07: Auth Failures — no brute-force protection, no session management
- A08: Data Integrity — insecure deserialization
- A09: Logging Failures — no audit log for security operations
- A10: SSRF — unvalidated user-supplied URLs
## Output
For each finding: ID, severity (Critical/High/Medium/Low), OWASP category, file:line, description, impact, recommended fix, effort estimate.
Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.
No comments yet. Be the first to comment!
