# Owasp Code Analysis

> [STUB - Not implemented] OWASP Top 10 2021 vulnerability detection including injection, XSS, and security misconfiguration. PROACTIVELY activate for: [TODO: Define on implementation]. Triggers: [TODO: Define on implementation]

- Skill: `agentient/owasp-code-analysis` (Agent Skill)
- Install (CLI): `npx skillmds@latest add agentient/owasp-code-analysis`
- Raw SKILL.md: https://api.skillmd.com/api/skills/agentient/owasp-code-analysis/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: Agentient (https://skillmd.com/u/agentient)
- Updated: 2026-09-10
- Page: https://skillmd.com/skills/agentient/owasp-code-analysis

---


# OWASP Code Analysis

> **STUB: This skill is not yet implemented**
>
> This placeholder preserves the documented plugin structure.
> See parent plugin README for planned capabilities.

## Planned Capabilities

**OWASP Top 10 2021 Coverage**:

| Rank | Category | Detection |
|------|----------|-----------|
| A01 | Broken Access Control | IDOR patterns, privilege checks |
| A02 | Cryptographic Failures | Weak hashing, plaintext secrets |
| A03 | Injection | SQL/NoSQL/Command injection, XSS |
| A05 | Security Misconfiguration | Verbose errors, default credentials |
| A06 | Vulnerable Components | CVE scanning in package.json/requirements.txt |
| A07 | Authentication Failures | Weak session mgmt, missing MFA |
| A08 | Data Integrity Failures | Insecure deserialization |
| A09 | Security Logging Failures | Missing audit logs |
| A10 | Server-Side Request Forgery | SSRF via URL params |

## Implementation Status

- [ ] Core implementation
- [ ] References documentation
- [ ] Output templates
- [ ] Integration tests