Skip to main content
affpapa.org
RU EN
skill

top-web-vulnerabilities — Claude Code skill: install and use

This skill organizes web application flaws by category and explains their causes, impact, and fixes. Use it for security reviews and assessment checklists.

Install into Claude Code · claude-code-templates All methods and platforms ↓ 
npx claude-code-templates@latest --skill security/top-web-vulnerabilities
Open on GitHub

What top-web-vulnerabilities does

The skill provides a structured reference for web application security issues, including injection flaws, authentication and session problems, data exposure, and configuration errors. Each entry connects a vulnerability with its root cause, likely impact, and mitigation. The material also covers API security, client-side issues, and flaws affecting mobile and IoT systems.

It is intended for systematic reviews and security checklist work. You should understand the client-server model, HTTP, HTML, JavaScript, SQL, XML, APIs, authentication, and authorization. Burp Suite and OWASP ZAP are listed as testing tools. Without those foundations, applying some of the terminology to a project will be harder.

What it helps with

  • identify common web application vulnerabilities
  • trace the causes of SQL injection and XSS
  • assess access-control and session weaknesses
  • choose mitigations for API security issues
  • build a practical security review checklist

Example prompts for the agent

  • Review this web application by vulnerability category and explain each issue, impact, and mitigation.
  • Assess the API for authorization flaws, data exposure, and security misconfiguration.
  • Create a checklist covering injection, session handling, and protective HTTP headers.

How to install top-web-vulnerabilities

1claude-code-templates

npx claude-code-templates@latest --skill security/top-web-vulnerabilities

2Skills CLI (Vercel)

npx skills add davila7/claude-code-templates --skill top-web-vulnerabilities -a claude-code

3Manually: put the files in place

~/.claude/skills/top-web-vulnerabilities/SKILL.md

Copy the whole skill folder; for one project use .claude/skills/top-web-vulnerabilities/

Step by step, with commands for each platform: How to install skills in Claude Code: five ways

Questions about top-web-vulnerabilities

How do I install top-web-vulnerabilities in Claude Code?

Run npx claude-code-templates@latest --skill security/top-web-vulnerabilities, then run npx skills add davila7/claude-code-templates --skill top-web-vulnerabilities -a claude-code. The skill file is at ~/.claude/skills/top-web-vulnerabilities/SKILL.md.

What does top-web-vulnerabilities do?

It organizes web application vulnerabilities and helps explain their causes, effects, and mitigations. Its reference covers injection, access control, sessions, data exposure, and security configuration.

What should I know before using the skill?

You should know HTTP and basic client-server architecture, plus HTML, JavaScript, SQL, XML, APIs, authentication, and authorization. Burp Suite and OWASP ZAP are listed for security testing.

Similar skills

All skills for Security →
git-guardrails-claude-code Matt Pocock This skill adds a Claude Code hook that stops risky Git commands before they run. Use it when an agent must not push or discard working-tree changes. 499,069installs ponytail-review DietrichGebert ponytail-review reviews a change beyond the diff, checking connected code, bugs, risks, load, tests, speed, and unnecessary code. Use it for PRs and commits. CX Codex +1 57,000installs ponytail-audit DietrichGebert It audits a repository and ranks bugs, risks, and redundant code in a one-shot report. Use it when you need a review without code changes. CX Codex +1 45,400installs security-audit cloudflare Reviews codebases and APIs for vulnerabilities using safe sandboxing. Fits pre-release security reviews, pen-test triage, and architecture checks. CX Codex +1 54,800installs security-and-hardening addyosmani Guides threat modeling and security checks for code that handles user input, authentication, sessions, or external services. Use it when building a feature that accepts untrusted data or reviewing code before release. CX Codex +1 70,200installs supabase official supabase Guides the agent through database configuration and strict RLS policies in Supabase. CX Codex GP ChatGPT 8installs

From the same set361

The whole set →
supabase-performance-optimizer A Claude slash command that inspects a Supabase database for slow queries and wasted indexes, then hands back an optimization plan. 1,026installs nestjs-expert A Claude skill that brings Nest.js knowledge into your session: modules, dependency injection, testing, and auth. 1,024installs design-database-schema This command plans database structures around requirements, relationships, and query patterns. Use it to draft a schema or rethink an existing one. 1,021installs supabase-security-audit A slash command that audits a Supabase project: RLS policies, role permissions, API keys and auth configuration, with a report at the end. 1,020installs screenshot-ui-analyzer A subagent that turns a UI screenshot into a component list, layout map and design patterns. Handy when you have an image but no mockup or source. 1,018installs ai-agents-architect Patterns for building autonomous agents: ReAct loops, planning, tool registries and memory. Useful when your agent loops or mishandles tool calls. 995installs image-enhancer A skill that sharpens images and screenshots, raises their resolution and clears compression artifacts. Handy before publishing a post or a report. 989installs supabase-migration-assistant Generates and validates Supabase database migrations. It builds SQL scripts, updates TypeScript definitions, and prepares rollback steps. 982installs

Project sponsors

Companies that keep this analytics open
Gold sponsor
Nutra.Club

Impressions, clicks and code copies — open statistics. We keep the numbers public for the same reason NeBlask itself is public. Become a sponsor