OWASP ASVS Application Security AI Skill Guide

Overview & Engine Architecture

OWASP Application Security Verification Standard (ASVS) is a catalog of security requirements grouped by chapters (authn, session, access control, validation, crypto, API, etc.) across levels (typically L1-L3). Teams pick a target level, map each requirement to an implemented control or exception, and collect verification evidence. Agents translate ASVS items into concrete engineering tasks - not vague "be secure" advice.

Threat / compliance context
   -> Choose ASVS level (L1 baseline ... L3 high assurance)
       -> Chapter requirements
           -> Control implementation + tests
               -> Evidence / exceptions register

When to use this skill