owasp-top-10-testing
Systematic testing against OWASP Top 10 (2025 edition): Broken Access Control (with SSRF), Security Misconfiguration, Software Supply Chain Failures…
Skill by AMG555
Install
Works with Claude Code, Claude apps, Codex, Cursor, Gemini CLI, GitHub Copilot, VS Code, OpenCode, Goose, Windsurf. Read the repository before you give any tool access to your data.
npx agentmarket install skill/amg555-owasp-top-10-testing
Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.
Get the weekly diff
The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.
About
Use cases: design, testing, security
Reviews
Write a reviewNo reviews yet. Installed it? Reviews come from verified installers only. How reviews work
Permissions
What this skill can do and what it asks for, from its SKILL.md. Checked Oct 25, 2026.
- Tools
- No tools found
- Secrets
- None asked for
- Install scripts
- None found
Network hosts it talks to 1
codeload.github.com· found in install command
Files it touches
~/.claude/skills/owasp-top-10-testing
What's inside
- Skill name
owasp-top-10-testing- Description
- Systematic testing against OWASP Top 10 (2025 edition): Broken Access Control (with SSRF), Security Misconfiguration, Software Supply Chain Failures, Cryptographic Failures, Injection, Insecure Design, Authentication Failures, Integrity Failures, Logging Failures, Mishandling of Exceptions. Use when performing full-scope AppSec compliance reviews.
- License
- NOASSERTION
- Instructions
- 69 lines in SKILL.md · view on GitHub
Files (1)
- SKILL.md
The license isn't open source, so the instructions aren't shown here. Read SKILL.md on GitHub
More from AMG555/Kestrel
- 0.561score
kestrel-eino-demo
AMG555
Full-featured example skill package with SKILL.md + optional scripts/, references/, assets/ directories; validates Eino skill and HTTP package-internal paths…
SkillAFreshness: AClaude Code +9 - 0.559score
api-security-testing
AMG555
Systematic API security testing based on OWASP API Security Top 10 (2023): BOLA/IDOR dual-token auth testing, mass assignment, BFLA privilege escalation…
SkillAFreshness: AClaude Code +9 - 0.559score
binary-mobile-reversing
AMG555
APK/EXE/binary reversing: UniApp/DCloud/Flutter reversing, certificate pinning bypass, exported components, memory-corruption exploit chains, IoT firmware.
SkillAFreshness: AClaude Code +9 - 0.559score
capability-primitive-search
AMG555
Capability primitives + state-space search: compose read/write/exec/ssrf and other primitives into RCE equations A-F, map low-severity findings…
SkillAFreshness: AClaude Code +9 - 0.559score
cloud-attack-methods
AMG555
Cloud attacks: metadata API, S3/K8s, AWS/Azure/GCP identity escalation, MinIO attack matrix, Aliyun FC, ChengZi SDK decryption.
SkillAFreshness: AClaude Code +9 - 0.559score
component-vuln-intel
AMG555
Online threat intelligence: after component identification, search CVE/search-engines/security-community/GitHub PoC/asset-engines/live-intel/dependency-chain…
SkillAFreshness: AClaude Code +9 - 0.559score
pentest-agent-os
AMG555
Penetration testing agent operating system.
SkillAFreshness: AClaude Code +9 - 0.559score
pentest-blackboard
AMG555
Kestrel project blackboard: cross-session Fact graph (SQLite) + upsert_project_fact/record_vulnerability record-while-attacking rhythm, relationship edges…
SkillAFreshness: AClaude Code +9 - 0.559score
post-exploitation
AMG555
Post-exploitation / privilege escalation + credential cracking + crypto attacks: reverse shell, Linux/Windows privesc, lateral movement, tunneling, AV…
SkillAFreshness: AClaude Code +9 - 0.559score
proxy-tool-bootstrap
AMG555
Self-sourced proxy + tool bootstrap: SOCKS5/HTTP/Tor rerouting sequences, Python tool self-implementation, wordlist generation, OOB infrastructure.
SkillAFreshness: AClaude Code +9 - 0.559score
attack-surface-recon
AMG555
Recon / attack surface mapping: passive whois/amass/crt.sh/FOFA/Shodan, active subfinder/httpx/naabu/katana/nuclei, DNS geolocation/CDN/Nginx catch-all/BT…
SkillAFreshness: AClaude Code +9 - 0.554score
redteam-opsec
AMG555
OPSEC / covert operations discipline: IP blacklist bypass, rate/timing control, traffic obfuscation, minimal footprint, anti-forensics, progressive exposure.
SkillAFreshness: AClaude Code +9
Signals
- Stars
- 0
- Forks
- 0
- Open issues
- 0
- Last commit (this folder)
- Oct 22, 2026 (6 days ago)
From GitHub (fetched Oct 24, 2026).
Details
- License
- NOASSERTION
- Repository
- github.com/AMG555/Kestrel
- First seen
- Oct 24, 2026
- Last checked
- Oct 24, 2026
- Source
- GitHubgithub-graphql
More from AMG555
- 0.561score
kestrel-eino-demo
AMG555
Full-featured example skill package with SKILL.md + optional scripts/, references/, assets/ directories; validates Eino skill and HTTP package-internal paths…
SkillAFreshness: AClaude Code +9 - 0.559score
api-security-testing
AMG555
Systematic API security testing based on OWASP API Security Top 10 (2023): BOLA/IDOR dual-token auth testing, mass assignment, BFLA privilege escalation…
SkillAFreshness: AClaude Code +9 - 0.559score
capability-primitive-search
AMG555
Capability primitives + state-space search: compose read/write/exec/ssrf and other primitives into RCE equations A-F, map low-severity findings…
SkillAFreshness: AClaude Code +9 - 0.559score
binary-mobile-reversing
AMG555
APK/EXE/binary reversing: UniApp/DCloud/Flutter reversing, certificate pinning bypass, exported components, memory-corruption exploit chains, IoT firmware.
SkillAFreshness: AClaude Code +9 - 0.559score
attack-surface-recon
AMG555
Recon / attack surface mapping: passive whois/amass/crt.sh/FOFA/Shodan, active subfinder/httpx/naabu/katana/nuclei, DNS geolocation/CDN/Nginx catch-all/BT…
SkillAFreshness: AClaude Code +9 - 0.559score
cloud-attack-methods
AMG555
Cloud attacks: metadata API, S3/K8s, AWS/Azure/GCP identity escalation, MinIO attack matrix, Aliyun FC, ChengZi SDK decryption.
SkillAFreshness: AClaude Code +9
Cite this page
owasp-top-10-testing skill. Agent Mart. https://agentmart.dev/skills/amg555-owasp-top-10-testing (last updated 2026-10-24)