netsuite-owasp-secure-coding — Claude Code skill: how to install
Equips AI agents with OWASP Top 10 (2021) secure coding rules for JavaScript and SuiteScript 2.1. Useful for auditing RESTlets and stopping injections.
npx skills add oracle/netsuite-suitecloud-sdk --skill netsuite-owasp-secure-coding -a claude-codeWhat netsuite-owasp-secure-coding does
This skill organizes 48 specific security pitfalls labeled OSCP-001 through OSCP-048. Each entry contrasts insecure implementations against hardened fixes. Guidance covers context-aware output encoding across five HTML environments, along with CSP header templates.
It works beyond NetSuite. The assistant triggers these rules automatically when encountering topics like XSS or CSRF. It also watches for NetSuite API calls such as query.runSuiteQL or N/https.
Because this guidance focuses strictly on code implementation, platform-level role configuration and TBA authentication setup remain outside its core scope.
What it helps with
- audit RESTlets and Suitelets for code injection flaws
- build CSP headers and validate uploaded file types
- encode untrusted strings across five HTML contexts
- protect AI agent workflows from prompt injection risks
Example prompts for the agent
- Review this RESTlet script for security vulnerabilities.
- Generate CSP header templates for my Suitelet.
- Show the recommended pattern to prevent SuiteQL injection.
How to install netsuite-owasp-secure-coding
1Skills CLI (Vercel)
npx skills add oracle/netsuite-suitecloud-sdk --skill netsuite-owasp-secure-coding -a claude-code2Manually: put the files in place
~/.claude/skills/netsuite-owasp-secure-coding/SKILL.mdCopy the whole skill folder; for one project use .claude/skills/netsuite-owasp-secure-coding/
1Skills CLI (Vercel)
npx skills add oracle/netsuite-suitecloud-sdk --skill netsuite-owasp-secure-coding -a codex2Manually: put the files in place
.agents/skills/netsuite-owasp-secure-coding/SKILL.mdFor all projects use ~/.agents/skills/
1Skills CLI (Vercel)
npx skills add oracle/netsuite-suitecloud-sdk --skill netsuite-owasp-secure-coding -a cursor2Manually: put the files in place
.cursor/skills/netsuite-owasp-secure-coding/SKILL.mdCursor also reads .agents/skills/ and .claude/skills/
1GitHub CLI
gh skill install oracle/netsuite-suitecloud-sdk netsuite-owasp-secure-coding2Manually: put the files in place
.github/skills/netsuite-owasp-secure-coding/SKILL.md1Skills CLI (Vercel)
npx skills add oracle/netsuite-suitecloud-sdk --skill netsuite-owasp-secure-coding -a gemini-cli2Platform CLI
gemini skills install https://github.com/oracle/netsuite-suitecloud-sdk --path packages/agent-skills/netsuite-owasp-secure-codingManually: put the files in place
.devin/skills/netsuite-owasp-secure-coding/SKILL.mdThe legacy .windsurf/skills/ path still works
Skills CLI (Vercel)
npx skills add oracle/netsuite-suitecloud-sdk --skill netsuite-owasp-secure-coding -a opencodeClaude.ai
Zip the folder and upload it in Settings → Capabilities → Skills
Step by step, with commands for each platform: How to install skills in Claude Code: five ways
Questions about netsuite-owasp-secure-coding
How to install netsuite-owasp-secure-coding in Claude Code?
Run npx skills add oracle/netsuite-suitecloud-sdk --skill netsuite-owasp-secure-coding -a claude-code in your terminal.
What does netsuite-owasp-secure-coding do?
It provides implementation-focused security guidelines for JavaScript and SuiteScript 2.1 based on OWASP Top 10 (2021). The skill references 48 cataloged pitfalls to help review and write secure code.
Does netsuite-owasp-secure-coding cover NetSuite authentication roles?
No, platform role management and Token-Based Authentication belong to separate guide references. This skill concentrates on code-level defenses, input checks, and context encoding.
