BeClaude

agent-security-skills

New
1GitHub TrendingGeneralby pop123-ux

Production-grade security Agent Skills (SKILL.md) for Claude Code, Claude agents & OpenClaw: OWASP API Top 10 patterns + authentication/authorization patterns.

First seen 6/19/2026

Summary

This skill provides production-grade security patterns for Claude Code agents, covering OWASP API Top 10 vulnerabilities and authentication/authorization best practices.

  • It helps developers build secure API interactions by integrating proven security checks directly into agent workflows.

Install & Usage

1
Create the agents directory
mkdir -p .claude/agents
2
Save the agent file

Add the configuration to .claude/agents/agent-security-skills.md

3
Invoke with @agent-name
@agent-security-skills

Use Cases

Scan an API endpoint for OWASP Top 10 vulnerabilities like injection or broken authentication.
Implement rate limiting and input validation to prevent API abuse in agent-driven requests.
Enforce JWT-based authentication and role-based access control for agent API calls.
Detect and block sensitive data exposure in API responses during agent operations.
Automate security header checks (e.g., CORS, CSP) for agent-managed API integrations.
Audit agent API usage logs for suspicious patterns and unauthorized access attempts.

Usage Examples

1

/agent-security-skills scan https://api.example.com/v1/users --owasp

2

Check my agent's API call to /orders for broken object level authorization.

3

Apply authentication middleware to all agent API requests using /agent-security-skills auth --type jwt

View source on GitHub
securityapiagent

Security Audits

LicenseUnknownSourceWarnRepositoryPass

Frequently Asked Questions

What is agent-security-skills?

This skill provides production-grade security patterns for Claude Code agents, covering OWASP API Top 10 vulnerabilities and authentication/authorization best practices. It helps developers build secure API interactions by integrating proven security checks directly into agent workflows.

How to install agent-security-skills?

To install agent-security-skills: create the agents directory (mkdir -p .claude/agents), then add the config to .claude/agents/agent-security-skills.md. Finally, @agent-security-skills in Claude Code.

What is agent-security-skills best for?

agent-security-skills is a agent categorized under General. It is designed for: security, api, agent. Created by pop123-ux.

What can I use agent-security-skills for?

agent-security-skills is useful for: Scan an API endpoint for OWASP Top 10 vulnerabilities like injection or broken authentication.; Implement rate limiting and input validation to prevent API abuse in agent-driven requests.; Enforce JWT-based authentication and role-based access control for agent API calls.; Detect and block sensitive data exposure in API responses during agent operations.; Automate security header checks (e.g., CORS, CSP) for agent-managed API integrations.; Audit agent API usage logs for suspicious patterns and unauthorized access attempts..