You are owasp-security-scanner - a specialized skill for automated OWASP Top 10 vulnerability detection and assessment. This skill provides comprehensive capabilities for identifying web application security vulnerabilities based on OWASP guidelines.
Overview
This skill enables AI-powered OWASP security scanning including:
# ZAP rules for access control testing# Active scan policy focusing on access control
zap-cli active-scan \
--scanpolicyname "access-control" \
--recurse \
https://target.example.com
# Manual testing for IDOR# Test parameter manipulation
curl -H "Authorization: Bearer $TOKEN" \
"https://api.example.com/users/123"# Should only access own user
curl -H "Authorization: Bearer $TOKEN" \
"https://api.example.com/users/456"# Test IDOR
A02:2021 - Cryptographic Failures
# SSL/TLS analysis with testssl.sh
docker run -it drwetter/testssl.sh https://target.example.com
# Check for weak ciphers
nmap --script ssl-enum-ciphers -p 443 target.example.com
# ZAP passive rules detect:# - Missing HSTS# - Weak SSL/TLS# - Mixed content# - Insecure cookies
A03:2021 - Injection
# ZAP includes comprehensive injection testing:# - SQL Injection# - XSS (Reflected, Stored, DOM-based)# - LDAP Injection# - OS Command Injection# - XML Injection# SQLMap for advanced SQL injection
sqlmap -u "https://target.example.com/search?q=test" --batch --forms
# Retire.js for JavaScript libraries
retire --js --path ./public/js --outputformat json
# ZAP includes vulnerable library detection# Also use dependency-scanner skill for comprehensive SCA
A07:2021 - Authentication Failures
ZAP authentication testing includes:
Brute force protection
Session management
Password policies
Multi-factor authentication bypass
A08:2021 - Software and Data Integrity Failures
Checks for:
CI/CD pipeline security
Unsigned updates
Deserialization vulnerabilities
A09:2021 - Security Logging Failures
Review:
Audit logging implementation
Log injection vulnerabilities
Log storage security
A10:2021 - Server-Side Request Forgery
# ZAP SSRF detection through active scanning# Manual testing
curl "https://target.example.com/fetch?url=http://169.254.169.254/latest/meta-data/"
6. Report Generation
JSON Report
{"@version":"2.14.0","@generated":"2026-01-24T10:00:00Z","site":[{"@name":"https://target.example.com","alerts":[{"pluginid":"10021","alertRef":"10021","alert":"X-Content-Type-Options Header Missing","name":"X-Content-Type-Options Header Missing","riskcode":"1","confidence":"2","riskdesc":"Low (Medium)","cweid":"693","wascid":"15","description":"The Anti-MIME-Sniffing header...","solution":"Ensure that the application sets the Content-Type header appropriately...","reference":"https://owasp.org/...","instances":[{"uri":"https://target.example.com/","method":"GET","param":"X-Content-Type-Options"}]}]}]}
HTML Report
# Generate HTML report
docker run -v $(pwd):/zap/wrk:rw -t ghcr.io/zaproxy/zaproxy:stable zap-baseline.py \
-t https://target.example.com \
-r owasp-report.html
MCP Server Integration
This skill can leverage the following MCP servers:
