SKILL

top-web-vulnerabilities

This skill should be used when the user asks to "identify web application vulnerabilities", "explain common security flaws", "understand vulnerability categories", "learn about injection attacks", "review access control weaknesses", "analyze API security issues", "assess security misconfigurations", "understand client-side vulnerabilities", "examine mobile and IoT security flaws", or "reference the OWASP-aligned vulnerability taxonomy". Use this skill to provide comprehensive vulnerability definitions, root causes, impacts, and mitigation strategies across all major web security categories.

Target: Cloud, operations & security. Automatically collected · unverified.

Excerpt from the author’s documentation

Extracted from a fixed version of SKILL.md in its original language. This is the author’s documentation; installation, compatibility and runtime results have not been verified by this site.

Read the original English text

Topics in the source

  • Top 100 Web Vulnerabilities Reference
  • Purpose
  • Prerequisites
  • Outputs and Deliverables
  • Core Workflow
  • Phase 1: Injection Vulnerabilities Assessment
  • Phase 2: Authentication and Session Security
  • Phase 3: Sensitive Data Exposure

Provide a comprehensive, structured reference for the 100 most critical web application vulnerabilities organized by category. This skill enables systematic vulnerability identification, impact assessment, and remediation guidance across the full spectrum of web security threats. Content organized into 15 major vulnerability categories aligned with industry standards and real-world attack patterns. Basic understanding of web application architecture (client-server model, HTTP protocol) Familiarity with common web technologies (HTML, JavaScript, SQL, XML, APIs) Understanding of authentication and authorization concepts Access to web application security testing tools (Burp Suite, OWASP ZAP) Knowledge of secure coding principles recommended Complete vulnerability catalog with definitions, root causes, impacts, and mitigations Category-based vulnerability groupings for systematic assessment Quick reference for security testing and remediation Foundation for vulnerability assessment checklists and security policies -- Evaluate injection attack vectors targeting data processing components: SQL Injection (1) Definition: Malicious SQL code inserted into input fields to manipulate database

This is an excerpt. Refer to the complete source and its current requirements.

Source repository
davila7/claude-code-templates
Source file
cli-tool/components/skills/security/top-web-vulnerabilities/SKILL.md
Fixed revision
21be197f100a12b8d0dd9a211cc244c8179f84d3
Read the complete original documentation ↗

Requirements

  • Only the author’s Skill metadata is included. Read the full instructions to check dependencies, licensing and conditions of use.

A small first task

先阅读原作者说明,再决定是否在自己的 AI 工具中使用。

Instructions for your AI tool

Author documentation is not live verification by this site. Without evidence, we do not mark a resource as compatible, safe or free.

Sources and evidence

This record was collected automatically. Its documentation, suitability and runtime behavior have not been manually verified.

Author: davila7/claude-code-templates · original repository metadata. Documentation review: Not reviewed. Last source check: 2026-11-09T15:01:40.642Z.

Categories are inferred from names, descriptions and paths. They do not establish compatibility.

License and attribution

MIT. Third-party content and copyright remain with their authors. Refer to the original license and terms.

Original license ↗

Synchronization, copying and user-reported success do not mark a resource as runtime-tested.

Limitations and notes

  • Collecting metadata does not mean this site has installed, adapted, runtime-tested or security-reviewed the resource.