360 Secure SkillHub
360 安全技能中心

Cyber OWASP Review

核心功能:接收扫描、测试或评审的原始安全发现,通过关键词与上下文匹配映射至OWASP Top10分类,按分类和严重程度聚合后生成专属修复清单。典型场景:标准化应用安全评审输出、分类级风险优先级排序。输入为各类原始安全发现,输出为分类映射结果及修复checklist,仅提供修复指引,不涉及攻击内容。

0x-professor
0x-professor
热度 60.41
最近更新 2026-05-17 12:51:24
分类:安全依赖:代码执行 / 读写文件应用场景:报告撰写 / 数据处理

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add cyber-owasp-review
Metadata
name
cyber-owasp-review
description
Map application security findings to OWASP Top 10 categories and generate remediation checklists. Use for normalized AppSec review outputs and category-level prioritization.

Cyber OWASP Review

Overview

Normalize application security findings into OWASP categories and produce remediation actions.

Workflow

  1. Ingest raw findings from scanners, tests, or reviews.
  2. Map findings to OWASP categories using keyword and context matching.
  3. Aggregate findings by category and severity.
  4. Produce category-specific remediation checklist output.

Use Bundled Resources

  • Run scripts/map_findings_to_owasp.py for deterministic mapping.
  • Read references/owasp-mapping-guide.md for category heuristics.

Guardrails

  • Keep guidance remediation-focused.
  • Do not provide exploit payloads or offensive attack playbooks.