OWASP Top 10 Mitigation Engine

This skill focuses on the 'Big 10' security risks, ensuring every app has a standard defensive baseline.

Instructions

1. Mitigate 'Injection' using prepared statements and param binding.
2. Prevent 'Broken Authentication' with secure session management.
3. Protect 'Sensitive Data' using modern encryption at rest (AES-256).
4. Fix 'XML External Entities' (XXE) by disabling external DTDs.
5. Implement 'Security Misconfiguration' audits for all server headers.

Examples

• "Audit my project against the OWASP Top 10 checklist."
• "Implement Content Security Policy (CSP) headers to prevent XSS."