Download

Skill UI

Browse and discover 6034+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search OWASP , found 39 results

Default Newest Most Downloaded

Apigee API Threat Protection

implementing-api-threat-protection-with-apigee

mukul975/Anthropic-Cybersecurity-Skills

Implement Apigee security policies to shield APIs from OWASP Top 10 threats by combining JSON/XML threat filtering, regex inspection, SpikeArrest rate limiting, OAuth 2.0 checks, API key validation, and Advanced API Security.

Cloud WAF Rule Tuning

implementing-cloud-waf-rules

mukul975/Anthropic-Cybersecurity-Skills

Guides deploying and tuning AWS, Azure, and Cloudflare Web Application Firewall rules to block OWASP Top 10 threats, throttle abusive bots and credential stuffing, and analyze logs before enforcing protections.

Runtime Application Self-Protection

implementing-runtime-application-self-protection

mukul975/Anthropic-Cybersecurity-Skills

Deploy OpenRASP agents to instrument Java and Python apps at runtime, detect OWASP Top 10 patterns, tune policies, and forward alerts to SIEM for comprehensive threat response.

ModSecurity Web Logging

implementing-web-application-logging-with-modsecurity

mukul975/Anthropic-Cybersecurity-Skills

Configure ModSecurity and OWASP CRS to log web application traffic, tune false positives, switch from detection to blocking, and ship audit data to SIEM for threat monitoring.

Pipeline DAST Integration

integrating-dast-with-owasp-zap-in-pipeline

mukul975/Anthropic-Cybersecurity-Skills

Integrates OWASP ZAP dynamic application security testing into CI/CD pipelines by configuring baseline, full, and API scans, tuning scan policies, interpreting vulnerabilities, and enforcing DAST quality gates in GitHub Actions or GitLab CI before production.

Postman API Security Tests

performing-api-security-testing-with-postman

mukul975/Anthropic-Cybersecurity-Skills

Leverages Postman collections, automated scripts, and Newman/ZAP integrations to exercise OWASP API Security Top 10 vulnerabilities across roles and CI/CD pipelines, ensuring authentication, authorization, injection, and data exposure defenses before deployment.

Threat Modeling With Threat Dragon

performing-threat-modeling-with-owasp-threat-dragon

mukul975/Anthropic-Cybersecurity-Skills

Use OWASP Threat Dragon to build collaborative data flow diagrams, classify threats via STRIDE/LINDDUN, capture mitigations, and export reports for secure design reviews.

Web Application Pentest

performing-web-application-penetration-test

mukul975/Anthropic-Cybersecurity-Skills

Leverages OWASP WSTG processes and Burp Suite to systematically validate web applications for authentication, authorization, input validation, session, and business-logic flaws ahead of deployment or during compliance checks.

Web Vulnerability Triage

performing-web-application-vulnerability-triage

mukul975/Anthropic-Cybersecurity-Skills

Validates DAST and SAST findings with OWASP risk-rating, filters false positives, and prioritizes remediation so teams focus on high-impact web-app issues identified by Burp/ZAP and managed in DefectDojo.

Secure Api Gateway Waf

securing-api-gateway-with-aws-waf

mukul975/Anthropic-Cybersecurity-Skills

Configures AWS WAF on API Gateway endpoints with managed OWASP rule groups, rate-based throttling, bot control, IP reputation filtering, and monitoring to block web exploits and abusive traffic.

BOLA API Testing Guide

testing-api-for-broken-object-level-authorization

mukul975/Anthropic-Cybersecurity-Skills

Guides pentesters through detecting Broken Object Level Authorization in REST and GraphQL APIs by enumerating object IDs, intercepting requests, manipulating identifiers, and verifying per-object access controls during OWASP API1 assessments.

API Mass Assignment Tester

testing-api-for-mass-assignment-vulnerability

mukul975/Anthropic-Cybersecurity-Skills

Automates mass-assignment checks by injecting privileged properties (role, balance, pricing, permissions) into writable JSON/XML API endpoints so security teams can verify OWASP API3 Broken Object Property Level Authorization defenses and spot auto-binding vulnerabilities.

Prev 1 234 Next

Language