onlyoneuche/run-asvs-compliance

Perfil de onlyoneuche

Última atividade de origem registrada: 8 de outubro de 2026 às 18:46

Catálogo do SkillsMP atualizado: 26 de outubro de 2026 às 11:37

skills coletadas: 1

Estrelas no GitHub: 2
Forks no GitHub: 0

README do repositório

Arquivo de origem do README: README.md

Ler o README original

Expandir README completo

[![Skill Grader: A](https://seoagent.com/skill-grader/badge/onlyoneuche/run-asvs-compliance.svg)](https://seoagent.com/skill-grader/onlyoneuche/run-asvs-compliance) # Run ASVS Compliance A portable skill for coding agents to review web applications and APIs against OWASP ASVS. It maps selected controls to code, configuration, and tests, then reports evidence, gaps, and checks that need a person or a running environment. Its core workflow is language neutral; it includes review cues for Django and Express and uses the same trace-through-code approach for other stacks. It uses the CSV from OWASP's [fixed ASVS 5.0.0 release](https://github.com/OWASP/ASVS/releases/tag/v5.0.0_release) by default. Teams can provide another checklist or select specific controls. The official checklist is retrieved for each review; it is not bundled here. They were together because one `npx skills add` command can install the skill for both agents. Separate commands are clearer when someone uses only one. ## Installation Install Run-ASVS-Compliance globally so it is available in any project without adding files to your application repository. ### Codex ```bash npx skills add onlyoneuche/run-asvs-compliance -g -a codex ``` Open your project in Codex and run: ```text $run-asvs-compliance ``` ### Claude Code ```bash npx skills add onlyoneuche/run-asvs-compliance -g -a claude-code ``` Open your project in Claude Code and run: ```text /run-asvs-compliance ``` ## Use Source Place the repository folder at `~/.agents/skills/run-asvs-compliance` for Codex or `~/.claude/skills/run-asvs-compliance` for Claude Code. Open the application repository. In Codex, type `$run-asvs-compliance`; in Claude Code, type `/run-asvs-compliance`. It reviews current changes and follows affected security paths. If there are no identifiable changes, it runs a focused baseline review. The application repository needs no skill-specific changes. ## Review scope - **Changes found:** Review uncommitted and staged changes, plus branch changes when a reliable base is available. Follow changed code into related security paths and tests. - **No changes found:** Run a focused baseline review of exposed paths and shared security controls. This is not a whole-codebase assessment. - **Full review requested:** Ask for an application-wide review and the target ASVS level, for example: “Use `$run-asvs-compliance` to review the entire application against ASVS 5.0.0 Level 1.” This takes longer and covers all applicable controls at that level. The review is read-only by default. Its report states whether the reviewed scope meets applicable ASVS controls, does not meet them, or remains undetermined. It cites files and lines, records tests run, and marks controls outside the chosen scope as **not reviewed**. Human reviewers confirm runtime behavior. See [SKILL.md](SKILL.md) for the agent workflow and [report-format.md](references/report-format.md) for the report structure.

Carregando o README do repositório…

Publicações

Ver todos →

d∆LnTon𓂀

@onlyoneuche30 de set. de 2026 09:02 UTC

Anúncio de SkillVerificar a segurança de aplicativos

Resumo da publicação · inglês

Onlyoneuche introduces an early Skill for reviewing code changes against OWASP ASVS controls, tracing affected security paths, and reporting evidence, gaps and runtime checks.

Publicação original

Ver detalhes da Skill · run-asvs-compliance/skill

Skills neste repositório

classificação pendente

skill

ocupação

descrição

atualizado

run-asvs-compliance

sem classificação

Check changes or an existing web application or API for security risks using the official stable OWASP ASVS 5.0.0 checklist by default. Use for quick developer security reviews across languages and frameworks, ASVS evidence mapping, authentication or…

Idioma do texto original: inglês

2026-10-08

Mostrando 1 de 1 skills coletadas.

Instalar com um assistente de IA

Copie este prompt para o assistente de IA que você usa.

Follow https://skillsmp.com/skill-install/prompt.md to install Agent Skills from https://github.com/onlyoneuche/run-asvs-compliance.