Owasp

senior-secops is a Claude skill for application security reviews, vulnerability management, CVE triage, dependency risk, OWASP checks, and compliance guidance. It includes references for security standards and SOC 2, PCI-DSS, HIPAA, GDPR, plus scripts for code scanning, dependency assessment, and compliance checks.

security-pen-testing is an authorized penetration testing skill for OWASP Top 10 reviews, web and API checks, static analysis, dependency auditing, secret detection, safe attack patterns, responsible disclosure, and structured pen test reports.

adversarial-reviewer is a prompt-only Claude skill for adversarial code review. It reviews diffs, commits, or files through Saboteur, New Hire, and Security Auditor personas, classifies severity, and returns BLOCK / CONCERNS / CLEAN merge guidance. Best for pre-merge reviews of risky changes; it has no external dependencies.

The exploiting-insecure-deserialization skill helps authorized penetration testers identify serialized inputs, match Java, PHP, Python, and .NET targets, and validate exploitability safely. It includes workflow guidance, detection cues, and tool references for focused testing.

The exploiting-http-request-smuggling skill helps authorized testers detect and assess HTTP request smuggling from Content-Length and Transfer-Encoding parsing mismatches across proxies, load balancers, and CDNs. It’s built for Security Audit workflows with raw-request probing, architecture fingerprinting, and practical validation steps.