owasp-top-10-web
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a template and instructional guide for performing application security reviews based on the OWASP Top 10:2021 framework. It contains comprehensive detection patterns and remediation advice for various vulnerability categories such as Broken Access Control, Injection, and Cryptographic Failures.
- [SAFE]: The tool configuration (YAML frontmatter) correctly restricts the agent's capabilities to standard file reading and searching tools (
Read,Grep,Glob), ensuring the agent does not execute code or access the network during the analysis. - [SAFE]: The skill includes explicit security notices instructing the agent to treat reviewed code as data rather than instructions, mitigating the risk of prompt injection from analyzed source files.
- [SAFE]: The supplementary file
csharp-dotnet.mdprovides high-quality, language-specific security patterns for modern .NET development, promoting best practices such as parameterized queries, strong password policies, and proper middleware ordering.
Audit Metadata