agent-security-skills
NewProduction-grade security Agent Skills (SKILL.md) for Claude Code, Claude agents & OpenClaw: OWASP API Top 10 patterns + authentication/authorization patterns.
Summary
This skill provides production-grade security patterns for Claude Code agents, covering OWASP API Top 10 vulnerabilities and authentication/authorization best practices.
- It helps developers build secure API interactions by integrating proven security checks directly into agent workflows.
Install & Usage
mkdir -p .claude/agentsAdd the configuration to .claude/agents/agent-security-skills.md
@agent-security-skillsUse Cases
Usage Examples
/agent-security-skills scan https://api.example.com/v1/users --owasp
Check my agent's API call to /orders for broken object level authorization.
Apply authentication middleware to all agent API requests using /agent-security-skills auth --type jwt
Security Audits
Frequently Asked Questions
What is agent-security-skills?
This skill provides production-grade security patterns for Claude Code agents, covering OWASP API Top 10 vulnerabilities and authentication/authorization best practices. It helps developers build secure API interactions by integrating proven security checks directly into agent workflows.
How to install agent-security-skills?
To install agent-security-skills: create the agents directory (mkdir -p .claude/agents), then add the config to .claude/agents/agent-security-skills.md. Finally, @agent-security-skills in Claude Code.
What is agent-security-skills best for?
agent-security-skills is a agent categorized under General. It is designed for: security, api, agent. Created by pop123-ux.
What can I use agent-security-skills for?
agent-security-skills is useful for: Scan an API endpoint for OWASP Top 10 vulnerabilities like injection or broken authentication.; Implement rate limiting and input validation to prevent API abuse in agent-driven requests.; Enforce JWT-based authentication and role-based access control for agent API calls.; Detect and block sensitive data exposure in API responses during agent operations.; Automate security header checks (e.g., CORS, CSP) for agent-managed API integrations.; Audit agent API usage logs for suspicious patterns and unauthorized access attempts..