---
name: "owasp-top10-remediation-guide"
description: "Audit and remediate web applications against the official OWASP Top 10 vulnerabilities."
metadata:
  author: "OWASP"
  version: "1.0.0"
  runtime_compatibility:
    - "codex"
    - "claude-code"
    - "cursor"
    - "windsurf"
triggers:
  - "audit owasp top 10"
  - "remediate broken access control"
  - "fix ssrf vulnerability owasp"
permissions:
  fs_read: true
  fs_write: "workspace"
  shell_exec: false
  net_access: false
---

# OWASP Top 10 Web Application Vulnerability Remediation

Provides actionable remediation patterns for OWASP Top 10: Broken Access Control, Cryptographic Failures, Injection, Insecure Design, Security Misconfiguration, and Server-Side Request Forgery.

## When to Invoke
Invoke this skill whenever you need to:
- audit owasp top 10
- remediate broken access control
- fix ssrf vulnerability owasp

## Execution SOP & Rules
1. Verify authorization checks on every single API endpoint; never trust client-supplied user IDs.
2. Use parameterized queries or ORMs exclusively to prevent command and SQL injection.
3. Block private IP ranges (127.0.0.1, 10.0.0.0/8, 169.254.169.254) on outbound fetch operations.
4. Enforce secure HTTP response headers and disable server version banners.

## Verification Checklist
- Run local linting, syntax validation, and type-checks before reporting completion.
- Ensure all created or modified files adhere to workspace boundaries and avoid uncommitted secrets.
- Verify tests or build commands exit cleanly with return code 0.